[Bug 1901906] Re: amd64 images should have correct set of bootloaders installed

[Dimitri John Ledkov]

https://launchpad.net/~xnox/+livefs/ubuntu/groovy/any/+build/247095

Triggered cpc build and took the qcow2 image out of there.

root at ottawa:/# dpkg -l | grep -v '^ii'
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                           Version                             Architecture Description
+++-==============================-===================================-============-===============================================================================
root at ottawa:/# dpkg -l | grep grub
ii  grub-common                    2.04-1ubuntu35.1                    amd64        GRand Unified Bootloader (common files)
ii  grub-efi-amd64-bin             2.04-1ubuntu35.1                    amd64        GRand Unified Bootloader, version 2 (EFI-AMD64 modules)
ii  grub-efi-amd64-signed          1.155.1+2.04-1ubuntu35.1            amd64        GRand Unified Bootloader, version 2 (EFI-AMD64 version, signed)
ii  grub-gfxpayload-lists          0.7                                 amd64        GRUB gfxpayload blacklist
ii  grub-pc                        2.04-1ubuntu35.1                    amd64        GRand Unified Bootloader, version 2 (PC/BIOS version)
ii  grub-pc-bin                    2.04-1ubuntu35.1                    amd64        GRand Unified Bootloader, version 2 (PC/BIOS modules)
ii  grub2-common                   2.04-1ubuntu35.1                    amd64        GRand Unified Bootloader (common files for version 2)
root at ottawa:/# dpkg -l | grep shim
ii  shim                           15+1552672080.a4a1fbe-0ubuntu2      amd64        boot loader to chain-load signed boot loaders under Secure Boot
ii  shim-signed                    1.45+15+1552672080.a4a1fbe-0ubuntu2 amd64        Secure Boot chain-loading bootloader (Microsoft-signed binary)


correct bootloaders installed and there are no partially installed packages; or conflicting or unconfigured ones. All is good.


** Tags removed: verification-needed verification-needed-groovy
** Tags added: verification-done verification-done-groovy

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to livecd-rootfs in Ubuntu.
https://bugs.launchpad.net/bugs/1901906

Title:
  amd64 images should have correct set of bootloaders installed

Status in livecd-rootfs package in Ubuntu:
  Fix Released
Status in livecd-rootfs source package in Groovy:
  Fix Committed
Status in livecd-rootfs source package in Hirsute:
  Fix Released

Bug description:
  [Impact]

   * amd64 images should have shim-signed & grub-pc installed as the
  bootloaders, with all other alternatives not installed; and not
  partially removed (rc state). This is the only way to ensure that
  secureboot/efi boot works correctly, but also for BIOS grub-pc to work
  correctly. This is how we install systems by default today.

  [Test Case]

   * Build images; check that shim-signed & grub-pc are installed and configured
   * Check that no other packages are autoremovable or partially removed (rc)

  [Regression Potential]

   * The above changes gurantee that upon upgrades / dist-upgrade the
  correct set of bootloaders are installed. There will be a change of
  debconf keys and bootloader packages that are installed on the system,
  when comparing with a previous image, which some automation may be
  sensitive to if they were trying to automatically correct bootloader
  setup before.

  [Other Info]
   
   * Uploaded into hirsute already.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/livecd-rootfs/+bug/1901906/+subscriptions