[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil

[Yuan-Chen Cheng]

per code in ubiquity:/usr/share/grub-installer/grub-installer
it install grub-efi-amd64-signed first, and then install shim-signed.
(grub_package=grub-efi-amd64-signed as the code run to here.)
===
        apt-install $grub_package || exit_code=$?
        case $grub_package in
            *-signed)
                apt-install shim-signed || true
                apt-install grub-pc || true
                ;;
        esac
===

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1825128

Title:
  grub-efi-amd64-signed should depends on mokutil

Status in OEM Priority Project:
  Confirmed
Status in grub2-signed package in Ubuntu:
  Confirmed

Bug description:
  as turn on secure boot, the postinst script to do configure will call
  mokutils. if mokutils is not installed, it will fail.

  Base on that, maybe grub-efi-amd64-signed should depend on mokutils.

  The postinst script call /usr/share/grub/grub-check-signatures from
  grub-common package. grub-check-signatures call mokutils to extract
  key and use the key to check if then kernel is properly signed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions