[Bug 1525393] Re: xenial secureboot images not signed

[Adam Conrad]

In build/util/efi-image:

                        if wget -q "$file" -O
"$workdir/grub$efi_name.efi" 2>/dev/null

Will lead to a 0-length grubx64.efi and skipping signed shim if wget
fails.

This should be fixed to download to a temp location and only copy in
place if it succeeds and, probably, also be a hard failure if we can
determine that we're expecting this to be a signed build.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to debian-installer in Ubuntu.
https://bugs.launchpad.net/bugs/1525393

Title:
  xenial secureboot images not signed

Status in Ubuntu CD Images:
  Fix Committed
Status in debian-installer package in Ubuntu:
  Triaged

Bug description:
  When I try to run sbverify on EFI/BOOT/BOOTx64.EFI on current xenial desktop amd64 images, I get:
  No signature table present
  Unable to read signature data from /home/max/mount.d/EFI/BOOT/BOOTx64.EFI
  Signature verification failed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-cdimage/+bug/1525393/+subscriptions