grub2-signed postinsts need to source debconf

Bug #1997779 reported by Julian Andres Klode
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
grub2-signed (Ubuntu)
Fix Released
High
Unassigned
Bionic
Fix Released
Undecided
Unassigned
Focal
Fix Released
High
Unassigned
Jammy
Fix Released
High
Unassigned
Kinetic
Fix Released
High
Unassigned
Lunar
Fix Released
High
Unassigned

Bug Description

[Impact]
dpkg-reconfigure grub-efi-*-signed do nothing, as debconf is weird and sourcing the script inside grub-multi-install is not enough.

This means the questions about which ESP(s) to use might not get asked.

[Test plan]
Run dpkg-reconfigure grub-efi-amd64-signed, ensure it shows debconf prompts.

same for grub-efi-arm64-signed

[Where problems could occur]
I'm not sure where problems could occur from adding a single line to the top of postinst that sources debconf when all other packages have it too, hmm.

But of course debconf is always a bit weird. Maybe questions get asked twice, I don't know.

Changed in grub2-signed (Ubuntu Focal):
assignee: nobody → Julian Andres Klode (juliank)
importance: Undecided → High
Changed in grub2-signed (Ubuntu Jammy):
importance: Undecided → High
Changed in grub2-signed (Ubuntu Kinetic):
importance: Undecided → High
Changed in grub2-signed (Ubuntu Lunar):
importance: Undecided → High
Changed in grub2-signed (Ubuntu Focal):
assignee: Julian Andres Klode (juliank) → nobody
tags: added: foundations-todo
Changed in grub2-signed (Ubuntu Lunar):
status: New → Triaged
Changed in grub2-signed (Ubuntu Kinetic):
status: New → Triaged
Changed in grub2-signed (Ubuntu Jammy):
status: New → Triaged
Changed in grub2-signed (Ubuntu Focal):
status: New → Triaged
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2-signed - 1.189

---------------
grub2-signed (1.189) lunar; urgency=medium

  * Really rebuild against grub2 2.06-2ubuntu15

grub2-signed (1.188) lunar; urgency=medium

  * Rebuild against grub2 2.06-2ubuntu15
  * Source debconf in postinst script (LP: #1997779)
  * Still signed with the old key

grub2-signed (1.187) kinetic; urgency=medium

  * Rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

 -- Julian Andres Klode <email address hidden> Thu, 01 Dec 2022 17:13:46 +0100

Changed in grub2-signed (Ubuntu Lunar):
status: Triaged → Fix Released
Revision history for this message
Steve Langasek (vorlon) wrote : Please test proposed package

Hello Julian, or anyone else affected,

Accepted grub2-signed into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.173.4 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in grub2-signed (Ubuntu Focal):
status: Triaged → Fix Committed
tags: added: verification-needed verification-needed-focal
Revision history for this message
dann frazier (dannf) wrote :

Both amd64 and arm64 verifications failed:

= amd64 =
ubuntu@ubuntu:~$ dpkg -l | grep grub-efi
ii grub-efi-amd64-bin 2.04-1ubuntu47.5 amd64 GRand Unified Bootloader, version 2 (EFI-AMD64 modules)
ii grub-efi-amd64-signed 1.173.4+2.04-1ubuntu47.5 amd64 GRand Unified Bootloader, version 2 (EFI-AMD64 version, signed)
ubuntu@ubuntu:~$ sudo dpkg-reconfigure grub-efi-amd64-signed
Unknown device "/dev/disk/by-id/*": No such file or directory
Installing grub to /boot/efi.
Installing for x86_64-efi platform.
Installation finished. No error reported.
ubuntu@ubuntu:~$ sudo dpkg-reconfigure grub-efi-amd64-signed -plow
Unknown device "/dev/disk/by-id/*": No such file or directory
Installing grub to /boot/efi.
Installing for x86_64-efi platform.
Installation finished. No error reported.
ubuntu@ubuntu:~$

= arm64 =
ubuntu@ubuntu:~$ sudo dpkg-reconfigure grub-efi-arm64-signed -plow
Unknown device "/dev/disk/by-id/*": No such file or directory
Installing grub to /boot/efi.
Installing for arm64-efi platform.
Installation finished. No error reported.
ubuntu@ubuntu:~$ dpkg -l | grep grub-efi-arm64-signed
ii grub-efi-arm64-signed 1.173.4+2.04-1ubuntu47.5 arm64 GRand Uni
fied Bootloader, version 2 (EFI-ARM64 version, signed)

tags: added: verification-failed verification-failed-focal
removed: verification-needed verification-needed-focal
Revision history for this message
Julian Andres Klode (juliank) wrote :

Ugh, gotta double check what's going on there. It's possible we miss some test instructions, like unmount /boot/efi or something

Revision history for this message
Julian Andres Klode (juliank) wrote :

The problem in the verification above was:

> Unknown device "/dev/disk/by-id/*": No such file or directory

aka we don't support virtio-blk in the debconf, because those don't have by-id. That's tracked in bug 1997797 (yes confusingly similar number).

I reran this using

$ multipass launch focal

Then in there checked dpkg-reconfigure did nothing, then upgraded to the 47.5 version:

Unpacking grub-efi-amd64-signed (1.173.4+2.04-1ubuntu47.5) over (1.173.2~20.04.1+2.04-1ubuntu47.4) ...

After that, dpkg-reconfigure prompted me correctly.

tags: added: verification-done verification-done-focal
removed: verification-failed verification-failed-focal
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2-signed - 1.173.4

---------------
grub2-signed (1.173.4) focal; urgency=medium

  * Source debconf in postinst script (LP: #1997779)
  * Enforce build against 2.04-1ubuntu47.5

grub2-signed (1.173.3) focal; urgency=medium

  * Rebuild against grub2 2.04-1ubuntu47.5 (LP: #1996950)
  * Bump grub2-common dependency to 2.02~beta2-36ubuntu3.33 in xenial and
    2.02-2ubuntu8.25 in bionic to fix LP: #1995751

 -- Julian Andres Klode <email address hidden> Fri, 02 Dec 2022 15:15:54 +0100

Changed in grub2-signed (Ubuntu Focal):
status: Fix Committed → Fix Released
Revision history for this message
Steve Langasek (vorlon) wrote : Update Released

The verification of the Stable Release Update for grub2-signed has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Revision history for this message
Julian Andres Klode (juliank) wrote :

Verified for the 2.06 focal update too.

tags: added: verification-done-bionic
Revision history for this message
Julian Andres Klode (juliank) wrote :

For some reason the SRU tooling did not do the verification-needed bits for any release, but I marked it verified for bionic. We do not actually have support for this in bionic, so this doesn't do anything of course, the bug is just listed in the changelog due to copying the package verbatim.

So I just tested that it installed successfully and rebooted in multipass.

tags: added: verification-done-jammy
Revision history for this message
Julian Andres Klode (juliank) wrote :

Verified for jammy 1.187.2+2.06-2ubuntu14 in multipass.

Revision history for this message
Julian Andres Klode (juliank) wrote :

Verified for kinetic 1.187.2+2.06-2ubuntu14 in multipass

tags: added: verification-done-kinetic
Changed in grub2-signed (Ubuntu Kinetic):
status: Triaged → Fix Committed
Changed in grub2-signed (Ubuntu Jammy):
status: Triaged → Fix Committed
Changed in grub2-signed (Ubuntu Focal):
status: Fix Released → Fix Committed
Changed in grub2-signed (Ubuntu Bionic):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2-signed - 1.187.2

---------------
grub2-signed (1.187.2) kinetic; urgency=medium

  * Resign with 2022v1 signing key

grub2-signed (1.187.1) kinetic; urgency=medium

  * Source debconf in postinst script (LP: #1997779)
  * Really rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

grub2-signed (1.187) kinetic; urgency=medium

  * Rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

 -- Julian Andres Klode <email address hidden> Mon, 09 Jan 2023 17:22:33 +0100

Changed in grub2-signed (Ubuntu Kinetic):
status: Fix Committed → Fix Released
Changed in grub2-signed (Ubuntu Jammy):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2-signed - 1.187.2~20.04.2

---------------
grub2-signed (1.187.2~20.04.2) focal; urgency=medium

  * Resign with 2022v1 signing key
  * [focal/bionic] remaining backport changes:
    - Bump grub2-common dependency to 2.02~beta2-36ubuntu3.33 in xenial and
      2.02-2ubuntu8.25 in bionic to fix LP #1995751

grub2-signed (1.187.1) kinetic; urgency=medium

  * Source debconf in postinst script (LP: #1997779)
  * Really rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

grub2-signed (1.187) kinetic; urgency=medium

  * Rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

 -- Julian Andres Klode <email address hidden> Tue, 17 Jan 2023 15:51:22 +0100

Changed in grub2-signed (Ubuntu Focal):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2-signed - 1.187.2~18.04.1

---------------
grub2-signed (1.187.2~18.04.1) bionic; urgency=medium

  * Resign with 2022v1 signing key
  * [focal/bionic] remaining backport changes:
    - Bump grub2-common dependency to 2.02~beta2-36ubuntu3.33 in xenial and
      2.02-2ubuntu8.25 in bionic to fix LP #1995751

grub2-signed (1.187.1) kinetic; urgency=medium

  * Source debconf in postinst script (LP: #1997779)
  * Really rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

grub2-signed (1.187) kinetic; urgency=medium

  * Rebuild against grub2 2.06-2ubuntu14 (LP: #1996950)

 -- Julian Andres Klode <email address hidden> Tue, 17 Jan 2023 15:51:22 +0100

Changed in grub2-signed (Ubuntu Bionic):
status: Fix Committed → Fix Released
Benjamin Drung (bdrung)
tags: removed: foundations-todo
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.