Your message dated Wed, 31 Jul 2019 21:09:35 +0000
with message-id <[email protected]>
and subject line Bug#932269: fixed in edk2 0~20190606.20d2e5a1-2
has caused the Debian Bug report #932269,
regarding Ship the firmware "descriptor files" as part of the 'ovmf' package
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
932269: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932269
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ovmf
Version: 0~20181115.85588389-3
>From version 4.1 (due in August 2019) onwards, QEMU ships the so-called
firmware "descriptor files". These are small JSON files that describe
details about UEFI firmware binaries — such as the fimware binary path,
its architecture, supported machine type, NVRAM template and so forth.
You can see examples of these files in the upstream QEMU Git:
https://git.qemu.org/?p=qemu.git;a=tree;f=pc-bios/descriptors
$> tree descriptors/
descriptors/
├── 50-edk2-i386-secure.json
├── 50-edk2-x86_64-secure.json
├── 60-edk2-aarch64.json
├── 60-edk2-arm.json
├── 60-edk2-i386.json
└── 60-edk2-x86_64.json
QEMU 4.1 itself will ship the above files. However, Debian's `ovmf`
package needs to ship modified versions of these JSON files that
correspond to the OVMF biararies shipped in Debian. (See first
reference further below for an example.)
Why? Allow me to quote Laszlo Ersek, upstream EDK2/OVMF maintainer:
Distributions providing their own EDK2 packages would not include
the descriptors from upstream QEMU, even if they otherwise package
QEMU. That's beause the descriptor files in QEMU match the firmware
bundled with QEMU -- but the firmware images in the distros' own
EDK2 packages are different. So, if a distro provides an EDK2
package, then the same EDK2 package should offer matching
descriptors. QEMU offers descriptors (soon) because QEMU
technically distributes edk2 firmware binaries (soon). [Where
"soon" == QEMU 4.1]
References:
(1) Refer to this commit in Fedora's EDK2 package, which is equivalent
to Debian's `ovmf` package, as an example:
https://src.fedoraproject.org/rpms/edk2/c/674b3c8a27a8 (Ship the
JSON firmware "descriptor files")
(2) The Debian RFP to include a tool to generate OVMF "VARS" file with
default UEFI keys enrolled:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927414 (RFP:
qemu-ovmf-secureboot -- tool to enroll UEFI keys for Secure Boot)
--
/kashyap
--- End Message ---
--- Begin Message ---
Source: edk2
Source-Version: 0~20190606.20d2e5a1-2
We believe that the bug you reported is fixed in the latest version of
edk2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
dann frazier <[email protected]> (supplier of updated edk2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 31 Jul 2019 13:44:42 -0600
Source: edk2
Architecture: source
Version: 0~20190606.20d2e5a1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian QEMU Team <[email protected]>
Changed-By: dann frazier <[email protected]>
Closes: 932269
Changes:
edk2 (0~20190606.20d2e5a1-2) unstable; urgency=medium
.
* debian/tests/control: Add missing dependencies on ovmf,
qemu-efi-aarch64, and qemu-efi-arm.
* debian/rules: Fix a comment typo in the get-orig-source rules.
* debian/rules: Introduce a setup-build-stamp to avoid unnecessary
BuildTools rebuilds.
* ovmf: Add SecureBoot enabled variant:
- debian/control: add xorriso, qemu-utils, qemu-system-x86, python3 to
Build-Depends for the automatic key enrollment process.
- debian/rules:
- build a SecureBoot/SMM enabled variant of OVMF_CODE too.
- build OVMF_VARS.ms.fd with embedded Microsoft keys from the binary
EnrollDefaultKeys.efi
- debian/ovmf.links: add OVMF_CODE.ms.fd.
- debian/ovmf.install: install OVMF_VARS.ms.fd.
- d/p/ovmf-vars-generator-Pass-OEM-Strings-to-the-guest.patch: Support
passing in the PK/KEK via QEMU's --oemstring.
* Reenable HTTP Boot, which was accidentally disabled due to an upstream
macro rename.
* Add firmware descriptor files. Closes: #932269, LP: #1836859.
Checksums-Sha1:
34d53fd60b809a9af8ccbb81dc31636a8253492a 2850 edk2_0~20190606.20d2e5a1-2.dsc
4018a25d8b3e3d11ecc87270773f1d543f099ba8 7077
edk2_0~20190606.20d2e5a1.orig-qemu-ovmf-secureboot-1-1-3.tar.gz
e5a8902d8ce0489cd02d035865b22f98aff56c23 15731876
edk2_0~20190606.20d2e5a1.orig.tar.xz
fc663d7a18f24a5bd1d2f2a4812d8ef11c462925 23956
edk2_0~20190606.20d2e5a1-2.debian.tar.xz
3768fab244c573c7a581b16637451c8fa6564c65 10269
edk2_0~20190606.20d2e5a1-2_source.buildinfo
Checksums-Sha256:
9fe1aaa60ed31d873fa25a18621cb9d3da136e943f65736a6ec0f7b1275fc1cc 2850
edk2_0~20190606.20d2e5a1-2.dsc
f0874d37e5d0a72c27d5f717cb161fd48d252f26bfaf74ebc5761e36b3992363 7077
edk2_0~20190606.20d2e5a1.orig-qemu-ovmf-secureboot-1-1-3.tar.gz
1c0692bcee87fc17e21f42a4cfc248a4079d3870fb0b79d6b0188ca5e3fbe3ae 15731876
edk2_0~20190606.20d2e5a1.orig.tar.xz
0da2c51c5aaf458b0d2c2d2009b68d4f3a88427c37ed7ed7c637efe22bd61030 23956
edk2_0~20190606.20d2e5a1-2.debian.tar.xz
f31310fa87dc5df9e26cad11eac70160d5efaecf4f097850fbd3278c94e91a71 10269
edk2_0~20190606.20d2e5a1-2_source.buildinfo
Files:
89f39fc2714375579f51a401ce44dd77 2850 misc optional
edk2_0~20190606.20d2e5a1-2.dsc
a29d393bad8ee2dd6acac99ebb116e86 7077 misc optional
edk2_0~20190606.20d2e5a1.orig-qemu-ovmf-secureboot-1-1-3.tar.gz
716b2e2adad54773a3c1c5b4535b74ec 15731876 misc optional
edk2_0~20190606.20d2e5a1.orig.tar.xz
649108c505fdf88de713ab8d322c0d36 23956 misc optional
edk2_0~20190606.20d2e5a1-2.debian.tar.xz
c11eb152739618b30f85b54c777b0ec2 10269 misc optional
edk2_0~20190606.20d2e5a1-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJFBAEBCgAvFiEECfR9vy0y7twkQ+vuG/g8XlT8hkAFAl1B9bQRHGRhbm5mQGRl
Ymlhbi5vcmcACgkQG/g8XlT8hkDMjBAAncrugAoiMONGsy6KPKxf8ab+IWbcmIVF
FPR0R/cJHLjXfAXj3ujuctdCi9SiXRMhuWdANByRxXl6sC0ghgaYwL6KTxygo9Jz
PehzuZk9bvRjSQn4T9t2mw2q6109f3OoZBR2kWDW9GPsUU8o+ayWgdWsCNSRhI7+
VAUN8BbIH07TH7EW9su2ox071LpTPqiyYdHOq2bSmw47ZAyCAZqvE/Or0fQ+e+by
HW2Zx9RWN6MGun4intrp7PJVSa1c8sRGE4May7wi0/SM91kCJqO5sicUvf9GM5XU
Ok7j/XLAgC3yxfG9A4PGboYnUYmgDVbWsNHM3IhuyG/4JcKuMF9q9I5T+YB65tkB
jz5A3PNNfYKpTm41l3LCpdXOeTmK0HhzeeZxn2l1IcVuTcg1s5rqYJvCpCqK3221
X3BBkWUEgbGAgMYs6xHsO8/+T16jiipFT+7P3PFkuGrmpzVNYw3guaTQkzHQ2DIo
pt3/JIXMuLNW1AiXaZc50rlHGSvoEEdmq12XRvhSfqg47FO6rMXWLvYbyfkAsPYe
gyeCaq0sW7/7ClwT/iD8VXo1LHbQ9W8s11i+cCVmGlJIjccTGLAs0xeFSVvA3EDO
Dl3jnn6gNxpgK4L2tGGZ3C57wh/xlO29EqLn/5bVldIA5E1cmvWTXPk5WRcqIR0c
ol2wcNyfamY=
=4ljF
-----END PGP SIGNATURE-----
--- End Message ---
