[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-20 Thread Julian Andres Klode
Because the regression potential seems to large to me to suddenly rebuild grub 2.04 with a much older toolchain. Part of the reason for doing this is to build it with one toolchain, have one set of binaries. We've seen arm64 shims not boot when compiled with pre-hirsute toolchain, this is a risky m

[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-20 Thread Julian Andres Klode
This also makes validation of grub changes substantially harder, as everything now needs to be verified 4 times (don't forget xenial ESM), and triples the number of binaries we have to sign, which is terrible. There's a reason we went with a binary copy in the first place, instead of building grub

[Bug 1925745] Re: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies

2021-05-20 Thread Julian Andres Klode
** Changed in: apt (Ubuntu Impish) Status: Confirmed => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925745 Title: Hirsute: Cannot install ubuntu-desktop due to unmet dependen

[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-21 Thread Julian Andres Klode
I think we discussed this yesterday that we need to properly test this. A smoke test on amd64 is not adequate, we also need to ensure additionally that - there are no regressions on arm64 install update in canonistack server and reboot it and make sure it boots. - there are no regressions in (m

[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-21 Thread Julian Andres Klode
FWIW, I'm doing canonistack arm64 testing now, by upgrading the image, then upgrading to proposed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928674 Title: grub-efi-amd64 from grub2-unsigned has

[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-21 Thread Julian Andres Klode
So xenial: I verified that maas-style netbooting that chainloads to local grub still works. On arm64 canonistack, both the version in -updates and the version in -proposed fail to boot. After upgrade, the first boot gives us: EFI stub: Booting Linux Kernel... EFI stub: Using DTB from configura

[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-21 Thread Julian Andres Klode
bionic is good, I could do maas-style chained netbooting, as well as boot arm64 cloud instance without errors. ** Tags removed: verification-needed-bionic ** Tags added: verification-done-bionic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 1929244] Re: redis configuration enable include fragments by default

2021-05-21 Thread Julian Andres Klode
Given that redis is not a supported package, but just automatically synced from Debian into universe, it would be great if you could raise this issue with Debian and get it addressed there and then it will automatically pop up in future Ubuntu releases. I can do that too, if you prefer, but avoidi

[Bug 1928462] Re: package grub-efi-amd64-signed 1.167+2.04-1ubuntu44 failed to install/upgrade: installed grub-efi-amd64-signed package post-installation script subprocess returned error exit status 1

2021-05-23 Thread Julian Andres Klode
It seems your EFI variable storage is malfunctioning. It might just need some help. You can try resetting the BIOS, and rebooting a couple of times to try to trigger garbage collection in case it overflowed. If that doesn't help, you might have to get the mainboard reflashed or exchanged by its m

[Bug 1929324] Re: Grub menu is not shown because of shim error message

2021-05-23 Thread Julian Andres Klode
Currently working on resolving the very issue in shim. Though on second thought, maybe it needs some investigating as to why the menu isn't showing but operational, because clearly that shouldn't happen either. ** Changed in: grub2 (Ubuntu) Status: New => Won't Fix ** Changed in: grub2 (U

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-05-24 Thread Julian Andres Klode
Hi there, could you replace BOOTX64.EFI and shimx64.efi in your ESP with the shimx64.efi in? http://ppa.launchpad.net/ubuntu-uefi- team/ppa/ubuntu/dists/impish/main/signed/shim- amd64/15.4-0ubuntu3~uefi2/signed.tar.gz This makes the shim only mirror the actual MokListX, and not add the giant vend

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-05-24 Thread Julian Andres Klode
(for clarification, I forgot to say that this is for testing purposes, trying to figure out if this resolves the issue) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928434 Title: shim-signed does

[Bug 1925010] Re: shim-signed 15.4 does not boot on EFI 1.10 systems

2021-05-24 Thread Julian Andres Klode
We are blocked on https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1928434 and resolving https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1924605 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/

[Bug 1929440] Re: package grub-pc 2.04-1ubuntu26.11 failed to install/upgrade: installed grub-pc package post-installation script subprocess returned error exit status 127

2021-05-24 Thread Julian Andres Klode
Thanks for your bug report. It seems you changed one line in /etc/default/grub to GRUB_CMDLINE_LINUX_DEFAULT="quiet splash" "acpi=off" meaning that "acpi=off" is considered a program to run (and GRUB_CMDLINE_LINUX_DEFAULT="quiet splash" an environment variable to pass to it). Please change the

[Bug 1886161] Re: Unattended upgrades should work on roaming laptops

2021-05-25 Thread Julian Andres Klode
@Robin You should be able to just run `systemctl start apt-daily.service apt-daily-upgrade.service` from the hook. This will start those two services - which run update / upgrade - in the same transaction, and hence ordering will work correctly. The timer will still run again, so it's not _optimal

[Bug 1928674] Re: grub-efi-amd64 from grub2-unsigned has lost kernel/postinst.d script

2021-05-27 Thread Julian Andres Klode
We figured out the root causes for the failure on the cloud, and it is not a regression of this update compared to the one in -updates, so I'm marking xenial as verified again. What is happening on the cloud is that the cloud images ship with the grub "loader" installed into /boot/efi/EFI/BOOT/BO

[Bug 978587] Re: apt should ensure .deb are not corrupted before handing them to dpkg

2021-05-29 Thread Julian Andres Klode
** Changed in: apt (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/978587 Title: apt should ensure .deb are not corrupted before handing them to dpkg To m

[Bug 1883785] Re: intermittent boot failure dell inspiron 3593

2021-05-30 Thread Julian Andres Klode
We upgraded all EFI systems to the 2.04 EFI binaries. That does not look like a version mismatch problem, although we had some of those too. Might just be a fragile tpm. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.laun

[Bug 1930584] Re: InstallProgress is not being used as a context manager

2021-06-02 Thread Julian Andres Klode
I kind of don't need the bug in both places. I'd suggest to go fix your backend to pass an install progress and use a with statement, that we don't use one inside apt.cache was intentional. This means it produces warnings if you don't pass one, but frankly, that's bad practice. ** Changed in: pyt

[Bug 1925010] Re: shim-signed 15.4 does not boot on EFI 1.10 systems

2021-06-05 Thread Julian Andres Klode
Please open a new bug for that pfaelzerchen, using ubuntu-bug shim on your home server, and provide appropriate logs as documented in https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1928434 Also check if shim actually loaded grub, and if so, enable grub debug mode, set debug=all - maybe you

[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)

2021-06-07 Thread Julian Andres Klode
Probably https://github.com/rhboot/shim/pull/374/commits/87fbf42ac96f887a3620efbbabc501269dc9f918 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (h

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-07 Thread Julian Andres Klode
Please don't blame Python. This is by design, we should not upgrade Apple systems just because their dmi is broken. Seems we forgot to check that we are booting on UEFI in the first place, though, but oh well, still a step up from nobody upgrading to most x86 'PC's upgrading. -- You received thi

[Bug 1931136] Re: Don't unhook ExitBootServices() when EBS protection is disabled

2021-06-07 Thread Julian Andres Klode
** Changed in: shim (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1931136 Title: Don't unhook ExitBootServices() when EBS protection is disabled To mana

[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)

2021-06-07 Thread Julian Andres Klode
** Also affects: shim (Ubuntu) Importance: Undecided Status: New ** Changed in: shim (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-07 Thread Julian Andres Klode
** Changed in: shim (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928434 Title: shim-signed does not boot on EFI 2.40 by Apple To manage notifi

[Bug 1924605] Re: Grub2 menu not loading - could not create MokListXRT: Out of Resources

2021-06-07 Thread Julian Andres Klode
** Changed in: shim (Ubuntu) Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1924605 Title: Grub2 menu not loading - could not create MokListXRT: Out of Resourc

[Bug 1931136] [NEW] Don't unhook ExitBootServices() when EBS protection is disabled

2021-06-07 Thread Julian Andres Klode
Public bug reported: [Impact] This is a regression in shim 15.4 that causes a crash in shim when chainbooting. Also, the machine resets when you exit grub, rather than going back to the EFI shell when launched from it. [Test plan] TODO for the chainboot, something similar to https://github.com/

[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)

2021-06-07 Thread Julian Andres Klode
@Eugene Hey, you can extract a signed shim from http://ppa.launchpad.net /ubuntu-uefi-team/ppa/ubuntu/dists/impish/main/signed/shim- amd64/15.4-0ubuntu3~uefi3/ once it's there. You'll have to import the control/uefi.crt into your UEFI DB to test it. -- You received this bug notification because

[Bug 1931178] Re: apt-key fails when POSIXLY_CORRECT environmental variable is set

2021-06-07 Thread Julian Andres Klode
Is this a regression from an older release? We can fix it, but if it's not a regression, I'd just skip it, as running apt-key is the wrong approach anyway. They should just pmrum cp some-repo-key.gpg /etc/apt/trusted.gpg.d. optimally drop the keyring elsewhere and use signed-by in sources.list sni

[Bug 1930742] Re: cloud images in xenial do not get their boot path updated because we don't call grub-install --force-extra-removable

2021-06-07 Thread Julian Andres Klode
The relocation failure on install is not a regression vs 44.1 in -updates though, anyway. We should only fail on regressions, not make fixing additional issues requisites for verifying new issues. But oh well, Steve fixed it, but I'd like to make sure we actually test the same things and don't com

[Bug 1931213] Re: fwupd installs without shim if secure boot is disabled

2021-06-08 Thread Julian Andres Klode
There is an easy fix to make fu_efivar_secure_boot_enabled() return true all the time, but arguably that leads to terrible error messages saying secure boot is enabled. ** Tags added: rls-ii-incoming -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscrib

[Bug 1931213] [NEW] fwupd installs without shim if secure boot is disabled

2021-06-08 Thread Julian Andres Klode
Public bug reported: [Impact] fwupd currently configures the boot entry without shim if secure boot is disabled, leading to different code paths being taken on non-secureboot systems, and fwupd being broken if you intercept the reboot and turn on secure boot. This makes verifying changes harde

[Bug 1931213] Re: fwupd installs without shim if secure boot is disabled

2021-06-08 Thread Julian Andres Klode
Preferably I'd see fwupd to be booted by grub instead. It should create a flag file and then grub should have an if that finds the file and then displays a menu entry for chainloader to fwupd. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ub

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-08 Thread Julian Andres Klode
Doug, I'm not sure how you get confused, or why you spam the bug tracker with ASCII art like this. This = "vendor is apple OR can't read vendor" - the statement which caused the issue and which you blamed Python for for unknown reasons - was intentional, as I said. We explicitly discussed that and

[Bug 1930742] Re: cloud images in xenial do not get their boot path updated because we don't call grub-install --force-extra-removable

2021-06-08 Thread Julian Andres Klode
To be clear: This means the test case was wrong, as it was possible to construct systems where this worked before such as canonistack, but clearly there are also systems where the relocation becomes an issue at grub-install time. I personally never tested on AWS (I have credentials somewhere, I th

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-08 Thread Julian Andres Klode
Please note that this bug is about the shim itself. Disabling upgrades is tracked in bug 1929449 which was obviously fixed, causing the regression of sorts and that regression is tracked in bug 1931112. The update for that regression is in the process of being released. -- You received this bug n

[Bug 1931205] Re: false Grub2 dependency error avoid update by update-manager

2021-06-08 Thread Julian Andres Klode
I think we lost the ability to debug this. We'd have to get apt debugging turned on in update-manager and figure out what's going on; it's probably being removed and reinstated in some places and then stuff gets weird. ** Changed in: update-manager (Ubuntu) Status: New => Incomplete -- Y

[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)

2021-06-09 Thread Julian Andres Klode
I tried two approaches and neither worked, unfortunately :( I need to try Chris Coulson's patch, it certainly looks good. The current code to handle load option parsing is very confusing hacks around broken firmwares :/ But we also don't want to break more I guess. ** Changed in: shim (Ubuntu)

[Bug 1931595] Re: Compression type 0x3 not supported

2021-06-10 Thread Julian Andres Klode
grub 2.04 is used on UEFI systems (via grub2-unsigned and grub2-signed), so you can make this work on modern hardware. That said, that's somewhat accidental side effect of upgrading to 2.04 for UEFI, and not a conscious decision on anyone's part. ** Changed in: grub2 (Ubuntu) Status: New =>

[Bug 1923845] Re: Please compress packages with zstd by default

2021-06-10 Thread Julian Andres Klode
** Changed in: apt (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1923845 Title: Please compress packages with zstd by default To manage notifications abo

[Bug 1931874] [NEW] Failure to download packages with epochs (Regression from 2.1.15)

2021-06-14 Thread Julian Andres Klode
Public bug reported: [Impact] Packages where the epoch is encoded in the filename cannot be retrieved, as we overlooked some places when changing the acquire system to always use % encoded URLs. [Test plan] A test is included in the comprehensive test suite. [Where problems could occur] Regres

[Bug 1884248] Re: networkd-dispatcher gives corrupted information

2021-06-14 Thread Julian Andres Klode
Thanks for the update. We'll have a look at this in a couple days. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884248 Title: networkd-dispatcher gives corrupted information To manage notificatio

[Bug 1928100] Re: TLS handshake is fatal, not transient - hence not retried

2021-06-15 Thread Julian Andres Klode
** Also affects: apt (Ubuntu Hirsute) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928100 Title: TLS handshake is fatal, not transient - hence not retri

[Bug 1921626] Re: size mismatch error if request of unknown size is larger than others

2021-06-15 Thread Julian Andres Klode
** Description changed: [Impact] Downloads fail if: - there is at least one package each with Size and no size on a mirror - a package without a Size field is larger than a package with a Size field that's currently in the pipeline Also, this was silent, we need to add an error

[Bug 1930741] Re: 20apt-esm-hook.conf is missing semicolons at end of option

2021-06-16 Thread Julian Andres Klode
ubuntu-advantage-tools has incorrect syntax in its apt.conf.d snippet; missing the semicolon at the end of the options for the new options introduced recently: APT::Install::Pre-Invoke { "[ ! -f /usr/lib/ubuntu-advantage/apt-esm-hook ] || /usr/lib/ubuntu-advantage/apt-esm-hook pre-invoke

[Bug 1925745] Re: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies

2021-06-17 Thread Julian Andres Klode
** Description changed: + [Impact] + Phased upgrades were only applied to already installed packages, so if we had a source package foo building foo-core and foo-extra, and foo-core=1 was installed, and we tried to install foo-extra, it would fail because it would try to install 0% foo-extra=2

[Bug 1925745] Re: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies

2021-06-18 Thread Julian Andres Klode
This caused a regression in autopkgtest, causing the ubuntu-advantage- tools failure. We'll have to SRU an autopkgtest that sets always- include-phased-updates as in https://salsa.debian.org/ci- team/autopkgtest/-/merge_requests/125 ** Tags added: block-proposed-hirsute -- You received this bug

[Bug 1933058] Re: package shim-signed 1.40.4+15+1552672080.a4a1fbe-0ubuntu2 failed to install/upgrade: dependency problems - leaving triggers unprocessed

2021-06-21 Thread Julian Andres Klode
Broken firmware. Not much we can do about it. grub-install: warning: Cannot set EFI variable Boot. grub-install: warning: efivarfs_set_variable: writing to fd 8 failed: Input/output error. grub-install: warning: _efi_set_variable_mode: ops->set_variable() failed: Input/output error. grub-ins

[Bug 1924605] Re: Grub2 menu not loading - could not create MokListXRT: Out of Resources

2021-06-21 Thread Julian Andres Klode
Judah, your issue is addressed in https://github.com/rhboot/shim/pull/372, and it's somewhat different from this bug - which only causes a delay in boot. We have submitted a new shim with that fix to MS for signing. This is not a Debian bug tracker, but AFAIUI, they are going to cherry- pick that

[Bug 1933042] Re: the package shim shim-signed 1.47+15.4-0ubuntu2

2021-06-21 Thread Julian Andres Klode
Broken firmware, not much we can do about it. grub-install: avviso: Cannot read EFI Boot* variables. grub-install: avviso: read_file: could not read from file: Errore di input/output. grub-install: avviso: vars_get_variable: read_file(/sys/firmware/efi/vars/Boot0005-8be4df61-93ca-11d2-aa0d-00e09

[Bug 1928687] Re: Avoid infinite loop on EOF on media change prompt

2021-06-21 Thread Julian Andres Klode
I've not been able to reproduce this recently, there seems to be a race in the cdrom testing code somewhere and I've not been lucky to trigger it; but we saw no regressions in the test suite, and the fix is one of the obvious correct ones, so marking as verified. ** Tags removed: verification-need

[Bug 1926150] Re: [SRU] Backport JSON hooks 0.2

2021-06-21 Thread Julian Andres Klode
autopkgtests for apt itself have passed, verifying the fix. We still battle with one apport regression on focal, but it seems unrelated - they've failed before. ** Tags removed: verification-needed verification-needed-bionic verification-needed-focal verification-needed-hirsute ** Tags added: ver

[Bug 1921626] Re: size mismatch error if request of unknown size is larger than others

2021-06-21 Thread Julian Andres Klode
autopkgtests for apt itself have passed, verifying the fix. We still battle with one apport regression on focal, but it seems unrelated - they've failed before. ** Tags removed: verification-needed verification-needed-bionic verification-needed-focal ** Tags added: verification-done verification-

[Bug 1928100] Re: TLS handshake is fatal, not transient - hence not retried

2021-06-21 Thread Julian Andres Klode
autopkgtest have passed, so verified ** Tags removed: verification-needed verification-needed-hirsute ** Tags added: verification-done verification-done-hirsute -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.ne

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-22 Thread Julian Andres Klode
** Tags added: block-proposed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928434 Title: shim-signed does not boot on EFI 2.40 by Apple To manage notifications about this bug go to: https://bugs.

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-22 Thread Julian Andres Klode
** Tags removed: block-proposed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928434 Title: shim-signed does not boot on EFI 2.40 by Apple To manage notifications about this bug go to: https://bug

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-22 Thread Julian Andres Klode
** Description changed: + [Impact] + Booting MacBook is broken + + [Test plan] + We don't have a test plan per se to verify this bug, but the shim fix has been tested. Hard to verify those bugs :( + + [Where problems could occur] + We disable mirroring of vendor dbx into MokListXRT EFI variable

[Bug 1924605] Re: Grub2 menu not loading - could not create MokListXRT: Out of Resources

2021-06-22 Thread Julian Andres Klode
** Description changed: + [Impact] + Systems fail to mirror MokListXRT. We've taken measures to reduce the size of the variable, and also made one spot non-fatal when running on non-secureboot systems that was fatal before which should address those issues. Also see related bug 1928434. + + [T

[Bug 1926011] Re: groovy / focal fwupd sbat support

2021-06-24 Thread Julian Andres Klode
Can't seem to add bionic task, but also both kind of vital ** Also affects: oem-priority/bionic Importance: Undecided Status: New ** Also affects: oem-priority/focal Importance: Undecided Status: New ** No longer affects: oem-priority/focal ** No longer affects: oem-priority

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-24 Thread Julian Andres Klode
The binaries are the same across all releases, and we got confirmation before pushing the SRU out that they fix the issue, so marking as verified. ** Tags removed: verification-needed-hirsute verification-needed-xenial ** Tags added: verification-doen-hirsute verification-done-xenial ** Tags remo

[Bug 1924605] Re: Grub2 menu not loading - could not create MokListXRT: Out of Resources

2021-06-24 Thread Julian Andres Klode
Let's mark xenial verified too, the binaries are the same. ** Tags removed: verification-needed-xenial ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1924605 Ti

[Bug 1931874] Re: Failure to download packages with epochs (Regression from 2.1.15)

2021-06-24 Thread Julian Andres Klode
verified by autopkgtests ** Tags removed: verification-needed verification-needed-hirsute ** Tags added: verification-done verification-done-hirsute -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/19318

[Bug 1925745] Re: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies

2021-06-24 Thread Julian Andres Klode
We do not have any updates phasing in hirsute atm, so will have to hack in one :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925745 Title: Hirsute: Cannot install ubuntu-desktop due to unmet dep

[Bug 1898026] Re: interruption of dist-upgrade can leave you next release in sources.list

2021-06-24 Thread Julian Andres Klode
focal/2.0.6: The standalone test certainly worked, and the keyboard interrupts were delivered to do-release-upgrade ** Tags removed: verification-needed-focal ** Tags added: verification-done-focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed

[Bug 1898026] Re: interruption of dist-upgrade can leave you next release in sources.list

2021-06-24 Thread Julian Andres Klode
bionic, 1.6.14 is good too. root@b:~# python3 a.py WAITING ^C root@b:~# apt install libapt-pkg5.0 Reading package lists... Done Building dependency tree Reading state information... Done The following package was automatically installed and is no longer required: libfreetype6 Use 'apt aut

[Bug 1925745] Re: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies

2021-06-24 Thread Julian Andres Klode
Verification done. First I downgraded all systemd packages to the release pocket using # apt install '?installed?version(247.3-3ubuntu3.1$)=247.3-3ubuntu3' Then I hacked in Phased-Update-Percentage: 0 fields for all src:systemd packages in my local hirsute-updates Packages file in /var/lib/apt/l

[Bug 1933674] Re: gaixinhsg

2021-06-25 Thread Julian Andres Klode
** Changed in: apt (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1933674 Title: gaixinhsg To manage notifications about this bug go to: https://bugs.launchpad

[Bug 1562733] Re: apt signature requirements prevent updates from some repositories

2021-06-25 Thread Julian Andres Klode
** Changed in: apt (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1562733 Title: apt signature requirements prevent updates from some repositories

[Bug 1481871] Re: apt-key del silently fails to delete keys due to limited understanding of GPG key ID formats

2021-06-25 Thread Julian Andres Klode
Currently apt-key del can be called with a given key to remove it w/o having to check if it's in the database. Reporting an error would likely break existing packages. ** Changed in: apt (Ubuntu) Status: Triaged => Won't Fix -- You received this bug notification because you are a member o

[Bug 1134492] Re: xserver-xorg-lts-quantal breaks Kubuntu

2021-06-25 Thread Julian Andres Klode
I think this bug is obsolete now, so closing ** Changed in: apt (Ubuntu) Status: Confirmed => Invalid ** Changed in: apt (Ubuntu) Milestone: ubuntu-12.04.3 => None -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bu

[Bug 325700] Re: apt-key has unannounced dependency on wget

2021-06-25 Thread Julian Andres Klode
net-update has not been supported since 16.04, so this is somewhat resolved :D ** Changed in: apt (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/325700

[Bug 1309658] Re: apt.conf man page should indicate # is also used for comments

2021-06-25 Thread Julian Andres Klode
Thanks, @okay19, I have applied your patch in apt git. Sorry it took 5 1/2 years. ** Changed in: apt (Ubuntu) Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1309

[Bug 1925010] Re: shim-signed 15.4 does not boot on EFI 1.10 systems

2021-06-28 Thread Julian Andres Klode
Same binaries across all releases, so the verification on hirsute is valid elsewehre too. ** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which

[Bug 1925140] Re: fix insecure mode booting

2021-06-28 Thread Julian Andres Klode
Same binaries across all releases, so the verification on hirsute is valid elsewhere too. Either way, this regression never occured in pre- hirsute releases :D ** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You receive

[Bug 1925139] Re: efi: Failed to lookup EFI memory descriptor

2021-06-28 Thread Julian Andres Klode
Same binaries across all releases, so the verification on hirsute is valid elsewhere too. ** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which

[Bug 1925673] Re: Please set binary package compression to xz

2021-06-28 Thread Julian Andres Klode
We do not actually care about this on pre-impish releases, since their dpkg builds with xz anyway. This is just an artefact from binary copying the shim :/ ** Tags removed: verification-needed verification-needed-focal verification-needed-hirsute verification-needed-xenial ** Tags added: verifica

[Bug 1927857] Re: Update to grub 2.04-1ubuntu44 breaks booting

2021-06-28 Thread Julian Andres Klode
Did you set GRUB_ENABLE_CRYPTODISK? Please attach your /etc/default/grub. Encrypted /boot is not really supported, the installer does not create it, and no testing is performed on it. You have to hack around things and add GRUB_ENABLE_CRYPTODISK to /etc/default/grub, so it's very hard to setup. L

[Bug 1933826] Re: default file permissions on bootloader configuration

2021-06-28 Thread Julian Andres Klode
Fedora doesn't use grub-mkconfig after the initial install, but drops https://www.freedesktop.org/wiki/Specifications/BootLoaderSpec/ files into directories, so it's not entirely surprising their behavior is different. I'd say at the moment bootloader passwords are unsupported as IIRC, there are i

[Bug 1933826] Re: default file permissions on bootloader configuration

2021-06-28 Thread Julian Andres Klode
FWIW, we explicitly ship a patch to make the file world-readable if it does not contain a password. From: Colin Watson Date: Mon, 13 Jan 2014 12:12:55 + Subject: Make grub.cfg world-readable if it contains no passwords Patch-Name: grub.cfg-400.patch --- util/grub-mkconfig.in | 4 1 fil

[Bug 1924605] Re: Grub2 menu not loading - could not create MokListXRT: Out of Resources

2021-06-28 Thread Julian Andres Klode
Remarking xenial as done, got overridden by late shim-signed acceptance. ** Tags removed: verification-needed-xenial ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bu

[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

2021-06-28 Thread Julian Andres Klode
Remarking xenial as done, got overridden by late shim-signed acceptance. ** Tags removed: verification-needed-xenial ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bu

[Bug 1856422] Re: always call mokutil with --timeout -1 when enrolling dkms keys

2021-06-28 Thread Julian Andres Klode
Verified for ...16.04.9. Timeout is there with old shim-signed, gone with new one :) ** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is s

[Bug 1921134] Re: SBAT shim 15.4 release

2021-06-28 Thread Julian Andres Klode
I had already checked the various chainbooting thingies for newer releases, and the binaries are the same, so for xenial, I have validated the mokutil integration and everything worked as expected with 1.33.1~16.04.9 ** Tags removed: verification-needed-xenial ** Tags added: verification-done-xeni

[Bug 1923464] Re: ideally should boot rootfs from a matching hard drive

2021-06-28 Thread Julian Andres Klode
that's for systemd-boot, but oh well, nothing uses that in Ubuntu -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1923464 Title: ideally should boot rootfs from a matching hard drive To manage notifi

[Bug 1921134] Re: SBAT shim 15.4 release

2021-06-29 Thread Julian Andres Klode
I don't see any relevant changes in the shim userspace bits in the focal update, and I can't speak to what Oracle does or does not do with their packages. Certainly trying to compile the modules and install them, setting up MOK, during boot like that is not going to work. -- You received this bug

[Bug 1845037] Re: autopkgtest package "lxd" test has started failing

2021-06-30 Thread Julian Andres Klode
root@gainful-tarpon:~# cat

[Bug 1934100] [NEW] Setup Always-Include-Phased-Updates (for hirsute+)

2021-06-30 Thread Julian Andres Klode
Public bug reported: [Impact] APT 2.2.4 and newer, in hirsute-proposed, apply phasing to non-installed packages as well, to fix bug 1925745. This causes autopkgtest to no longer retrieve source packages (apt-get source still works fine), and hence the tests to fail - example: https://autopkgte

[Bug 1934100] Re: Setup Always-Include-Phased-Updates (for hirsute+)

2021-06-30 Thread Julian Andres Klode
** Description changed: [Impact] APT 2.2.4 and newer, in hirsute-proposed, apply phasing to non-installed packages as well, to fix bug 1925745. This causes autopkgtest to no longer retrieve source packages (apt-get source still works fine), and hence the tests to fail - example: https:

[Bug 1925745] Re: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies

2021-06-30 Thread Julian Andres Klode
autopkgtest SRUs are in bug 1934100 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925745 Title: Hirsute: Cannot install ubuntu-desktop due to unmet dependencies To manage notifications about this

[Bug 1928010] Re: Occasionally crashes in _relocate() on arm64

2021-06-30 Thread Julian Andres Klode
Upstream pull request #383 has been included in 15.4-0ubuntu6~uefi1, binaries can be found at http://ppa.launchpad.net/ubuntu-uefi- team/ppa/ubuntu/dists/hirsute/main/signed/shim- arm64/15.4-0ubuntu6~uefi1/ Please verify that it fixes the bug. -- You received this bug notification because you a

[Bug 1928010] Re: Occasionally crashes in _relocate() on arm64

2021-06-30 Thread Julian Andres Klode
Well, I think you already verified this in the upstream bug :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1928010 Title: Occasionally crashes in _relocate() on arm64 To manage notifications abou

[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)

2021-06-30 Thread Julian Andres Klode
Verified the fix worked. Updated my system firmware, EC, and something else. Hooray! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regres

[Bug 1931136] Re: Don't unhook ExitBootServices() when EBS protection is disabled

2021-06-30 Thread Julian Andres Klode
** Changed in: shim-signed (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1931136 Title: Don't unhook ExitBootServices() when EBS protection is d

[Bug 1931213] Re: fwupd installs without shim if secure boot is disabled

2021-07-01 Thread Julian Andres Klode
I am of the opposite opinion. I want users not having secure boot on to also fail to install firmware updates, such that these things can get tested properly. We have the "run fwupd" in the shim testing section, but apparently it wasn't done, and either way, we didn't have time to fix it. -- You

[Bug 1925010] Re: shim-signed 15.4 does not boot on EFI 1.10 systems

2021-07-02 Thread Julian Andres Klode
Hi, Donald: Your issue is different. Here you can't even get to the grub menu. If you can't boot into Windows either (did you try that from grub, or directly from the EFI boot menu [I think it's F12 or F10 or something you need to press at startup and select Windows]), that sounds more like a firmw

[Bug 1934506] [NEW] Mirrored MOK variables could be accidentally deleted

2021-07-02 Thread Julian Andres Klode
Public bug reported: Upstream bug #386 ** Affects: shim Importance: Unknown Status: Unknown ** Affects: shim (Ubuntu) Importance: Undecided Status: New ** Bug watch added: github.com/rhboot/shim/issues #386 https://github.com/rhboot/shim/issues/386 ** Also affect

[Bug 1934506] Re: Mirrored MOK variables could be accidentally deleted

2021-07-02 Thread Julian Andres Klode
** Description changed: - Upstream bug #386 + [Impact] + On some systems, Mok variables mirrored are accidentally deleted after the mirroring. This can prevent the kernel from loading DKMS modules, if it does not yet use the config table to parse the MokList variable; and userspace tools relyin

[Bug 1934644] [NEW] gsettings-desktop-schemas 40 breaks workspace nagivation with gnome-shell 38

2021-07-05 Thread Julian Andres Klode
Public bug reported: gsettings-desktop-schemas 40 is supposed to be used with gnome-shell 40, not 38, and hence has moved the Page_up/Down (and ) shortcuts for moving between workspaces from vertical to horizontal settings, breaking workspace navigation in gnome-shell 38. This commit needs to be

[Bug 1921134] Re: SBAT shim 15.4 release

2021-07-05 Thread Julian Andres Klode
It turns out that while there is no signed *fwupd* on xenial, there is a signed *fwupdate*, so releasing this update would break firmware updating after all :/ ** Tags added: block-proposed-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed

[Bug 1934650] [NEW] allow upgrades to hirsute for Apple hardware

2021-07-05 Thread Julian Andres Klode
Public bug reported: [Impact] Apple users were blocked from upgrading to hirsute in bug 1929449, the underlying issue in shim has now been resolved, and they can upgrade again. [Test plan] Upgrade an Apple machine running groovy to hirsute [Where problems could occur] Apple machines could have/

<    1   2   3   4   5   6   7   8   9   10   >