[Bug 2004208] [NEW] arm64 package has hardcoded x64 references

[dann frazier]

Public bug reported:

I couldn't figure out why the alternative wasn't being updated to the
new shim after I installed a kernel installed w/ a 2022 key. Turns out
its because we hardcode shim*x64* in the kernel hook:

ubuntu at ubuntu:~$ grep x64 /etc/kernel/postinst.d/zz-shim 
if update-alternatives --query shimx64.efi.signed | grep "Best: /usr/lib/shim/shimx64.efi.signed.previous" -q; then

There also seems to be a number of residual x64 references in the postinst:
ubuntu at ubuntu:~$ grep x64 /var/lib/dpkg/info/shim-signed.*
/var/lib/dpkg/info/shim-signed.postinst:	for efi_arch in x64 aa64; do
/var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.latest 100
/var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.previous 50
/var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.latest 50
/var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.previous 100
/var/lib/dpkg/info/shim-signed.postinst:	if update-alternatives --query shimx64.efi.signed | grep "Best: /usr/lib/shim/shimx64.efi.signed.previous" -q; then

** Affects: shim-signed (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim-signed in Ubuntu.
https://bugs.launchpad.net/bugs/2004208

Title:
  arm64 package has hardcoded x64 references

Status in shim-signed package in Ubuntu:
  New

Bug description:
  I couldn't figure out why the alternative wasn't being updated to the
  new shim after I installed a kernel installed w/ a 2022 key. Turns out
  its because we hardcode shim*x64* in the kernel hook:

  ubuntu at ubuntu:~$ grep x64 /etc/kernel/postinst.d/zz-shim 
  if update-alternatives --query shimx64.efi.signed | grep "Best: /usr/lib/shim/shimx64.efi.signed.previous" -q; then

  There also seems to be a number of residual x64 references in the postinst:
  ubuntu at ubuntu:~$ grep x64 /var/lib/dpkg/info/shim-signed.*
  /var/lib/dpkg/info/shim-signed.postinst:	for efi_arch in x64 aa64; do
  /var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.latest 100
  /var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.previous 50
  /var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.latest 50
  /var/lib/dpkg/info/shim-signed.postinst:			update-alternatives --install /usr/lib/shim/shim${efi_arch}.efi.signed shimx64.efi.signed /usr/lib/shim/shim${efi_arch}.efi.signed.previous 100
  /var/lib/dpkg/info/shim-signed.postinst:	if update-alternatives --query shimx64.efi.signed | grep "Best: /usr/lib/shim/shimx64.efi.signed.previous" -q; then

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/2004208/+subscriptions