[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

[Dimitri John Ledkov]

** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
-  * Boot to bionic EFI amd64 or arm64
+  * Boot to bionic EFI amd64 or arm64
  
   * If /boot/efi/EFI/ubuntu does not exist, execute
  
   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
+  * Check which grub*.efi files are in /boot/efi
+ 
   * Install grub2.04-signed on bionic amd64 or arm64
  
-  * Reboot, check that echo ${package_version} shows 2.04
+  * Check that grub*.efi files in /boot/efi changed, and match those
+ shipped by the grub2.04-signed package.
+ 
+  * Reboot, check that echo ${package_version} shows 2.04 in grub
+ console, or that boot is successful if there is no console access at
+ grub time.
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
+ 
+  * Check that grub*.efi files in /boot/efi now match those shipped by
+ the grub-efi-*-signed package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix&match userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.

** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
   * Boot to bionic EFI amd64 or arm64
  
   * If /boot/efi/EFI/ubuntu does not exist, execute
  
   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
-  * Check which grub*.efi files are in /boot/efi
+ and reboot
  
   * Install grub2.04-signed on bionic amd64 or arm64
  
-  * Check that grub*.efi files in /boot/efi changed, and match those
- shipped by the grub2.04-signed package.
- 
-  * Reboot, check that echo ${package_version} shows 2.04 in grub
- console, or that boot is successful if there is no console access at
- grub time.
+  * Reboot, check that echo ${package_version} shows 2.04
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
- 
-  * Check that grub*.efi files in /boot/efi now match those shipped by
- the grub-efi-*-signed package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix&match userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

Status in grub2 package in Ubuntu:
  Fix Released
Status in grub2 source package in Bionic:
  New
Status in grub2 source package in Focal:
  New

Bug description:
  [Impact]

   * Provide grub 2.04 backport to bionic for improved TPM support.

  [Test Case]

   * Boot to bionic EFI amd64 or arm64

   * If /boot/efi/EFI/ubuntu does not exist, execute

   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot

  and reboot

   * Install grub2.04-signed on bionic amd64 or arm64

   * Reboot, check that echo ${package_version} shows 2.04

   * Upgrade to focal

   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package

  [Where problems could occur]

   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.

   * One must be able to mix&match userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.

   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.

  [Other Info]

   * Targetted to be installed by default on some cloud images.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions