Publishing details

Changelog

grub2 (2.02+dfsg1-11ubuntu1~mtrudel28) disco; urgency=medium

  * Merge against Debian unstable; remaining changes:
    - debian/control: Update Vcs fields for code location on Ubuntu.
    - debian/control: Breaks shim (<< 13).
    - Secure Boot support: use newer patchset from rhboot repo:
      - many linuxefi_* patches added and modified
      - dropped debian/patches/linuxefi_require_shim.patch
      - renamed: debian/patches/no_insmod_on_sb.patch ->
        debian/patches/linuxefi_no_insmod_on_sb.patch
    - debian/patches/install_signed.patch, grub-install-extra-removable.patch:
      - Make sure if we install shim; it should also be exported as the default
        bootloader to install later to a removable path, if we do.
      - Rework grub-install-extra-removable.patch to reverse its logic: in the
        default case, install the bootloader to /EFI/BOOT, unless we're trying
        to install on a removable device, or explicitly telling grub *not* to
        do it.
      - Install a BOOT.CSV for fallback to use.
      - Make sure postinst and templates know about the replacement of
        --force-extra-removable with --no-extra-removable.
    - debian/patches/add-an-auto-nvram-option-to-grub-install.patch: Add the
      --auto-nvram option to grub-install for auto-detecting NVRAM availability
      before attempting NVRAM updates.
    - debian/build-efi-images: provide a new grub EFI image which enforces that
      loaded kernels are signed for Secure Boot: build gsb$arch.efi; which is
      the same as grub$arch.efi minus the 'linux' module. Without fallback to
      'linux' for unsigned loading, this makes it effectively enforce having a
      signed kernel.
    - Verify that the current and newer kernels are signed when grub is
      updated, to make sure people do not accidentally shutdown without a
      signed kernel.
    - debian/default/grub: replace GRUB_HIDDEN_* variables with the less
      confusing GRUB_TIMEOUT_STYLE=hidden.
    - debian/patches/support_initrd-less_boot.patch: Added knobs to allow
      non-initrd boot config.
    - Disable os-prober for ppc64el on the PowerNV platform, to reduce the
      number of entries/clutter from other OSes in Petitboot
    - debian/patches/shorter_version_info.patch: Only show the upstream version
      in menu and console, and hide the package one in a package_version
      variable.
    - debian/patches/skip_text_gfxpayload_where_not_supported.patch: Skip the
      'text' payload if it's not supported but present in gfxpayload, such as
      on EFI systems.
    - debian/patches/bufio_sensible_block_sizes.patch: Don't use arbitrary file
      fizes as block sizes in bufio: this avoids potentially seeking back in
      the files unnecessarily, which may require re-open files that cannot be
      seeked into, such as via TFTP.
    - debian/patches/ofnet-init-structs-in-bootpath-parser.patch: initialize
      structs in bootpath parser.
    - debian/rules: shuffle files around for now to keep build artefacts
      for signing at the same location as they were expected by Launchpad.
    - debian/rules, debian/control: enable dh-systemd.
    - debian/grub-common.install.in: install the systemd unit that's part of
      initrd fallback handling, missed when the feature landed.
    - debian/patches/quick-boot-lvm.patch: If we don't have writable
      grubenv and we're on EFI, always show the menu.
    - debian/patches/mkconfig_leave_breadcrumbs.patch: make sure grub-mkconfig
      leaves a trace of what files were sourced to help generate the config
      we're building.
    - debian/patches/linuxefi_truncate_overlong_reloc_section.patch: Windows
      7 bootloader has inconsistent headers; truncate to the smaller, correct
      size to fix chainloading Windows 7.
    - debian/patches/linuxefi_fix_relocate_coff.patch: fix typo in
      relocate_coff() causing issues with relocation of code in chainload.
    - debian/patches/add-initrd-less-boot-fallback.patch: add initrd-less
      capabilities. If a kernel fails to boot without initrd, we will fallback
      to trying to boot the kernel with an initrd. Patch by Chris Glass.
    - debian/patches/grub-reboot-warn.patch: Warn when "for the next
      boot only" promise cannot be kept.
  * Refreshed patches and fixed up attribution to the right authors after
    merge with Debian.

 -- Mathieu Trudel-Lapierre <email address hidden>  Tue, 05 Mar 2019 15:53:32 -0500

Available diffs

Builds

Built packages

Package files