[ubuntu/oracular-proposed] grub2-unsigned 2.12-5ubuntu4 (Accepted)

[Julian Andres Klode]

grub2-unsigned (2.12-5ubuntu4) oracular; urgency=medium

  * Merge from Debian unstable; remaining changes:
    - Add Ubuntu sbat data
    - build-efi-images: do not produce -installer.efi.signed. LP #1863994
    - grub-common: Install canonical-uefi-ca.crt
    - Check signatures
    - Support installing to multiple ESP (LP #1871821)
    - Split out unsigned artefacts into grub2-unsigned
    - Vcs-Git: Point to ubuntu packaging branch
    - Relax dependencies on grub-common and grub2-common
    - UBUNTU: Do not link grub-efi-*-unsigned docs to grub-common
    - UBUNTU: Default timeout changes
    - UBUNTU: Replace grub-install-extra-removable
    - UBUNTU: Revert "Add jfs module to signed UEFI images. Closes: #950959"
    - UBUNTU: Revert "Add f2fs module to signed UEFI images"
    - UBUNTU: Drop luks2
    - Install grub-initrd-fallback.service again
    - Build using -O1 on s390x to avoid misoptimization
    - grub-check-signatures: Support gzip compressed kernels
    - forward port fix for LP #1926748
    - Forward port the fix for LP #1930742 and make it conditional (xenial/bionic only)
    - Build grub2-unsigned packages with xz compression
    - Drop i386 from grub-efi-amd64*
    - Turn depends on grub-efi-amd64/arm64 unversioned
    - Revert "Have -bin packages Break pre-2.12 -signed packages"
    - Install grub-sort-version
    - rules: Add DPKG_BUILDPACKAGE_OPTIONS to generate-grub2-unsigned
    - d/postinst.in: Make empty "grub-pc/install_devices" non-fatal in "noninteractive" mode
    - Add debconf options "grub-{efi,pc}/cloud_style_installation"
    - grub-common.service: Add After/Requires=boot-complete.target (LP #1992643)
    - d/postinst.in: Remove upgrade check for GRUB version we can no longer upgrade from
    - Removed patches:
      + install-signed.patch with
      + grub-install-extra-removable.patch
      + grub-install-removable-shim.patch
    - Added patches:
      + ubuntu-install-signed.patch
      + ubuntu-grub-install-extra-removable.patch
      + ubuntu-zfs-enhance-support.patch
      + ubuntu-zfs-mkconfig-ubuntu-recovery.patch
      + ubuntu-zfs-mkconfig-ubuntu-distributor.patch
      + ubuntu-zfs-mkconfig-signed-kernel.patch
      + ubuntu-zfs-gfxpayload-keep-default.patch
      + ubuntu-zfs-gfxpayload-dynamic.patch
      + ubuntu-zfs-vt-handoff.patch
      + ubuntu-zfs-mkconfig-recovery-title.patch
      + ubuntu-zfs-insmod-xzio-and-lzopio-on-xen.patch
      + ubuntu-support-initrd-less-boot.patch
      + ubuntu-shorter-version-info.patch
      + ubuntu-add-initrd-less-boot-fallback.patch
      + ubuntu-mkconfig-leave-breadcrumbs.patch
      + ubuntu-fix-lzma-decompressor-objcopy.patch
      + ubuntu-add-devicetree-command-support.patch
      + ubuntu-boot-from-multipath-dependent-symlink.patch
      + ubuntu-resilient-boot-ignore-alternative-esps.patch
      + ubuntu-resilient-boot-boot-order.patch
      + ubuntu-speed-zsys-history.patch
      + ubuntu-dont-verify-loopback-images.patch
      + ubuntu-recovery-dis_ucode_ldr.patch
      + ubuntu-add-initrd-less-boot-messages.patch
      + rhboot-f34-make-exit-take-a-return-code.patch
      + rhboot-f34-dont-use-int-for-efi-status.patch
      + suse-grub.texi-add-net_bootp6-document.patch
      + ubuntu-verifiers-last.patch
      + ubuntu-os-prober-auto.patch
      + grub-sort-version.patch
      + Revert-kern-ieee1275-init-ppc64-Display-upper_mem_limit-w.patch
      + Revert-kern-ieee1275-init-ppc64-Fix-a-comment.patch
      + Revert-kern-ieee1275-ieee1275-Display-successful-memory-c.patch
      + Revert-loader-powerpc-ieee1275-Use-new-allocation-functio.patch
      + Revert-kern-ieee1275-cmain-ppc64-Introduce-flags-to-ident.patch
      + Revert-kern-ieee1275-init-ppc64-Rename-regions_claim-to-g.patch
      + Revert-kern-ieee1275-init-ppc64-Add-support-for-alignment.patch
      + Revert-kern-ieee1275-init-ppc64-Return-allocated-address-.patch
      + Revert-kern-ieee1275-init-ppc64-Decide-by-request-whether.patch
      + Revert-kern-ieee1275-init-ppc64-Introduce-a-request-for-r.patch
      + grub-install-efi-title.patch
      + kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-track-.patch
      + kern-efi-mm-Change-grub_efi_allocate_pages_real-to-call-s.patch
      + kern-efi-mm-Detect-calls-to-grub_efi_drop_alloc-with-wron.patch
      + nx/modules-strip-.llvm_addrsig-sections-and-similar.patch
      + nx/modules-Don-t-allocate-space-for-non-allocable-sections.patch
      + nx/modules-load-module-sections-at-page-aligned-addresses.patch
      + nx/nx-add-memory-attribute-get-set-API.patch
      + nx/nx-set-page-permissions-for-loaded-modules.patch
      + nx/nx-set-the-nx-compatible-flag-in-EFI-grub-images.patch
      + nx/efi-Disallow-fallback-to-legacy-Linux-loader-when-shim-sa.patch
      + nx/peimage-Add-memory-attribute-support.patch
      + commands-efi-tpm-Re-enable-measurements-on-confidential-c.patch
      + loader-efi-fdt-Add-fdtdump-command-to-access-device-tree.patch
  * Rebase d/legacy/update-grub.ubuntu.patch
  * Move -unsigned binaries to the -unsigned sources
  * efi/chainloader: Do not print device path (LP: #2073634)
  * Disable ELF metadata injection

Date: 2024-08-09 15:09:10.690510+00:00
Changed-By: Mate Kukri <mate.kukri at canonical.com>
Signed-By: Julian Andres Klode <julian.klode at canonical.com>
https://launchpad.net/ubuntu/+source/grub2-unsigned/2.12-5ubuntu4
-------------- next part --------------
Sorry, changesfile not available.