[Bug 1995751] Re: update to 2.04-1ubuntu47.4 drops zz-update-grub

[Steve Langasek]

Hello dann, or anyone else affected,

Accepted grub2-unsigned into focal-proposed. The package will build now
and be available at
https://launchpad.net/ubuntu/+source/grub2-unsigned/2.04-1ubuntu47.5 in
a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
focal to verification-done-focal. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-focal. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: grub2-unsigned (Ubuntu Focal)
       Status: New => Fix Committed

** Tags added: verification-needed verification-needed-focal

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1995751

Title:
  update to 2.04-1ubuntu47.4 drops zz-update-grub

Status in grub2 package in Ubuntu:
  Invalid
Status in grub2-unsigned package in Ubuntu:
  Confirmed
Status in grub2 source package in Bionic:
  Fix Released
Status in grub2-unsigned source package in Bionic:
  Confirmed
Status in grub2-unsigned source package in Focal:
  Fix Committed

Bug description:
  [Impact]
  New kernels don't appear in boot menu after install

  [Test plan]
  On a bionic VM, purge all grub and shim packages.

  Test 1: Upgrade release EFI stack
  - Install shim-signed with only release pocket
  - Enable -updates and add the proposed package, and upgrade

  Test 2: Upgrade broken EFI stack
  - Install shim-signed with only release and updates pocket
  - Upgrade grub2 binaries from proposed

  Test 3: Install latest EFI stack
  - Install shim-signed with release, updates, proposed grub2 enabled.

  Test 1a: Upgrade hybrid release stack:
  (same as 1, but install shim-signed and grub-pc)
  Test 2a: Upgrade hybrid broken stack:
  (same as 2, but install shim-signed and grub-pc)
  Test 3a: Upgrade hybrid broken stack:
  (same as 2, but install shim-signed and grub-pc)

  In all cases check that no errors occur and the
  /etc/kernel/postinst.d/zz-update-grub script exists at the end.

  Test 10: (grub2-unsigned)

  Ensure that grub-efi-{amd64,arm64} binary cannot be installed with
  older grub2-common binary installed  / pulls in new binary.

  Test 20: (grub2-signed)

  Ensure that grub-efi-{amd64,arm64}-signed binary cannot be installed
  with older grub2-common binary installed / pulls in new binary.

  [Where problems could occur]
  Could have missed a grub-.* binary or gotten the versions wrong and cause file conflicts.

  [build in -security]
  SRU is built in -security and binary copied to facilitate releasing the security update to grub2-unsigned that needs it.

  [Original bug report]
  A user reported that the GRUB menu was no longer being updated on a freshly deployed bionic system, and that this appears to be because /etc/kernel/postinst.d/zz-update-grub has disappeared.

  # The version in the bionic-security pocket has it:
  ubuntu at akis:~$ dpkg -c grub-efi-amd64_2.04-1ubuntu44.1.2_amd64.deb | grep zz
  -rwxr-xr-x root/root       646 2021-03-03 11:42 ./etc/kernel/postinst.d/zz-update-grub
  -rwxr-xr-x root/root       646 2021-03-03 11:42 ./etc/kernel/postrm.d/zz-update-grub

  # The version in bionic-updates does not:
  ubuntu at akis:~$ dpkg -c grub-efi-amd64_2.04-1ubuntu47.4_amd64.deb | grep zz
  ubuntu at akis:~$

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1995751/+subscriptions