** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] - * Boot to bionic EFI amd64 or arm64 + * Boot to bionic EFI amd64 or arm64 * If /boot/efi/EFI/ubuntu does not exist, execute on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot + * Check which grub*.efi files are in /boot/efi + * Install grub2.04-signed on bionic amd64 or arm64 - * Reboot, check that echo ${package_version} shows 2.04 + * Check that grub*.efi files in /boot/efi changed, and match those + shipped by the grub2.04-signed package. + + * Reboot, check that echo ${package_version} shows 2.04 in grub + console, or that boot is successful if there is no console access at + grub time. * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package + + * Check that grub*.efi files in /boot/efi now match those shipped by + the grub-efi-*-signed package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix&match userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images.
** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] * Boot to bionic EFI amd64 or arm64 * If /boot/efi/EFI/ubuntu does not exist, execute on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot - * Check which grub*.efi files are in /boot/efi + and reboot * Install grub2.04-signed on bionic amd64 or arm64 - * Check that grub*.efi files in /boot/efi changed, and match those - shipped by the grub2.04-signed package. - - * Reboot, check that echo ${package_version} shows 2.04 in grub - console, or that boot is successful if there is no console access at - grub time. + * Reboot, check that echo ${package_version} shows 2.04 * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package - - * Check that grub*.efi files in /boot/efi now match those shipped by - the grub-efi-*-signed package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix&match userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs