Format: 1.8 Date: Tue, 05 Mar 2019 15:53:32 -0500 Source: grub2 Architecture: source Version: 2.02+dfsg1-11ubuntu1~mtrudel28 Distribution: disco Urgency: medium Maintainer: Ubuntu Developers Changed-By: Mathieu Trudel-Lapierre Changes: grub2 (2.02+dfsg1-11ubuntu1~mtrudel28) disco; urgency=medium . * Merge against Debian unstable; remaining changes: - debian/control: Update Vcs fields for code location on Ubuntu. - debian/control: Breaks shim (<< 13). - Secure Boot support: use newer patchset from rhboot repo: - many linuxefi_* patches added and modified - dropped debian/patches/linuxefi_require_shim.patch - renamed: debian/patches/no_insmod_on_sb.patch -> debian/patches/linuxefi_no_insmod_on_sb.patch - debian/patches/install_signed.patch, grub-install-extra-removable.patch: - Make sure if we install shim; it should also be exported as the default bootloader to install later to a removable path, if we do. - Rework grub-install-extra-removable.patch to reverse its logic: in the default case, install the bootloader to /EFI/BOOT, unless we're trying to install on a removable device, or explicitly telling grub *not* to do it. - Install a BOOT.CSV for fallback to use. - Make sure postinst and templates know about the replacement of --force-extra-removable with --no-extra-removable. - debian/patches/add-an-auto-nvram-option-to-grub-install.patch: Add the --auto-nvram option to grub-install for auto-detecting NVRAM availability before attempting NVRAM updates. - debian/build-efi-images: provide a new grub EFI image which enforces that loaded kernels are signed for Secure Boot: build gsb$arch.efi; which is the same as grub$arch.efi minus the 'linux' module. Without fallback to 'linux' for unsigned loading, this makes it effectively enforce having a signed kernel. - Verify that the current and newer kernels are signed when grub is updated, to make sure people do not accidentally shutdown without a signed kernel. - debian/default/grub: replace GRUB_HIDDEN_* variables with the less confusing GRUB_TIMEOUT_STYLE=hidden. - debian/patches/support_initrd-less_boot.patch: Added knobs to allow non-initrd boot config. - Disable os-prober for ppc64el on the PowerNV platform, to reduce the number of entries/clutter from other OSes in Petitboot - debian/patches/shorter_version_info.patch: Only show the upstream version in menu and console, and hide the package one in a package_version variable. - debian/patches/skip_text_gfxpayload_where_not_supported.patch: Skip the 'text' payload if it's not supported but present in gfxpayload, such as on EFI systems. - debian/patches/bufio_sensible_block_sizes.patch: Don't use arbitrary file fizes as block sizes in bufio: this avoids potentially seeking back in the files unnecessarily, which may require re-open files that cannot be seeked into, such as via TFTP. - debian/patches/ofnet-init-structs-in-bootpath-parser.patch: initialize structs in bootpath parser. - debian/rules: shuffle files around for now to keep build artefacts for signing at the same location as they were expected by Launchpad. - debian/rules, debian/control: enable dh-systemd. - debian/grub-common.install.in: install the systemd unit that's part of initrd fallback handling, missed when the feature landed. - debian/patches/quick-boot-lvm.patch: If we don't have writable grubenv and we're on EFI, always show the menu. - debian/patches/mkconfig_leave_breadcrumbs.patch: make sure grub-mkconfig leaves a trace of what files were sourced to help generate the config we're building. - debian/patches/linuxefi_truncate_overlong_reloc_section.patch: Windows 7 bootloader has inconsistent headers; truncate to the smaller, correct size to fix chainloading Windows 7. - debian/patches/linuxefi_fix_relocate_coff.patch: fix typo in relocate_coff() causing issues with relocation of code in chainload. - debian/patches/add-initrd-less-boot-fallback.patch: add initrd-less capabilities. If a kernel fails to boot without initrd, we will fallback to trying to boot the kernel with an initrd. Patch by Chris Glass. - debian/patches/grub-reboot-warn.patch: Warn when "for the next boot only" promise cannot be kept. * Refreshed patches and fixed up attribution to the right authors after merge with Debian. Checksums-Sha1: d3d401e133826246f1526ec337e9df30f9e516ec 6940 grub2_2.02+dfsg1-11ubuntu1~mtrudel28.dsc 03178e75f9a11ce7a6ae9e2306d56aa5a5682a60 1155068 grub2_2.02+dfsg1-11ubuntu1~mtrudel28.debian.tar.xz a5c8a74d14229f65214d921895683c97afb74275 15358 grub2_2.02+dfsg1-11ubuntu1~mtrudel28_source.buildinfo Checksums-Sha256: d738161ee0c18dae2c6ff2c51fa400c2e737df0b0ad7398f6b682dcb2a6a5d2f 6940 grub2_2.02+dfsg1-11ubuntu1~mtrudel28.dsc c96d8b3668d7a00113372921a490195d838f07e2a84725249ed262d7cedbf489 1155068 grub2_2.02+dfsg1-11ubuntu1~mtrudel28.debian.tar.xz 9afad22da10fbfbf5225935e564d1c70fbd7e6a532e895fc75cba48c3d458c1f 15358 grub2_2.02+dfsg1-11ubuntu1~mtrudel28_source.buildinfo Files: 6b026463c646dc922efe56c6b92c71b8 6940 admin optional grub2_2.02+dfsg1-11ubuntu1~mtrudel28.dsc d378ba86fbdbedfb7223e3c07ec7aa98 1155068 admin optional grub2_2.02+dfsg1-11ubuntu1~mtrudel28.debian.tar.xz af437c319f5cdad6dd2354e9caa8c604 15358 admin optional grub2_2.02+dfsg1-11ubuntu1~mtrudel28_source.buildinfo Original-Maintainer: GRUB Maintainers