[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil

[Yuan-Chen Cheng]

@Ivan, I update how grub-check-signatures use mokutils in bug description.
Can you please check again?

** Description changed:

- as turn on secure boot, we need mokutil.
+ as turn on secure boot, the postinst script to do configure will call
+ mokutils. if mokutils is not installed, it will fail.
  
- the signed package is for secure boot. It should recommend mokutil so
- that when dkms is installed, we can have it.
+ Base on that, maybe grub-efi-amd64-signed should depend on mokutils.
+ 
+ The postinst script call /usr/share/grub/grub-check-signatures from
+ grub-common package. grub-check-signatures call mokutils to extract key
+ and use the key to check if then kernel is properly signed.

** Changed in: oem-priority
       Status: Won't Fix => Confirmed

** Changed in: oem-priority
     Assignee: (unassigned) => Yuan-Chen Cheng (ycheng-twn)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1825128

Title:
  grub-efi-amd64-signed should depends on mokutil

Status in OEM Priority Project:
  Confirmed
Status in grub2-signed package in Ubuntu:
  Incomplete

Bug description:
  as turn on secure boot, the postinst script to do configure will call
  mokutils. if mokutils is not installed, it will fail.

  Base on that, maybe grub-efi-amd64-signed should depend on mokutils.

  The postinst script call /usr/share/grub/grub-check-signatures from
  grub-common package. grub-check-signatures call mokutils to extract
  key and use the key to check if then kernel is properly signed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions