[Bug 1920008] Re: grub2-signed depends on grub2-common

[Dimitri John Ledkov]

In bionic chroot, without proposed, installed grub-efi-amd64-signed

# dpkg-query -W | grep grub
grub-common	2.02-2ubuntu8.21
grub-efi-amd64	2.02-2ubuntu8.21
grub-efi-amd64-bin	2.02-2ubuntu8.21
grub-efi-amd64-signed	1.93.24+2.02-2ubuntu8.21
grub2-common	2.02-2ubuntu8.21

Enable -proposed, and try to install grub-efi-amd64-signed, alone (no
full-upgrade)

# apt install grub-efi-amd64-signed
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
  gnupg-agent libssl1.0.0 multiarch-support
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  grub-common grub-efi-amd64 grub-efi-amd64-bin grub2-common
Suggested packages:
  multiboot-doc grub-emu xorriso desktop-base console-setup
The following packages will be upgraded:
  grub-common grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed grub2-common
5 upgraded, 0 newly installed, 0 to remove and 110 not upgraded.
Need to get 3561 kB of archives.
After this operation, 6137 kB of additional disk space will be used.
Do you want to continue?

Horay, grub2-common is being upgraded.

$ grub-mkimage -O x86_64-efi -o foo -p /boot/grub --verbose
...
lots of text

The image is successfully created.

** Tags removed: verification-needed verification-needed-bionic
** Tags added: verification-done verification-done-bionic

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1920008

Title:
  grub2-signed depends on grub2-common

Status in grub2-signed package in Ubuntu:
  Fix Released
Status in grub2-signed source package in Xenial:
  Fix Committed
Status in grub2-signed source package in Bionic:
  Fix Committed
Status in grub2-signed source package in Focal:
  Fix Committed
Status in grub2-signed source package in Groovy:
  Fix Committed

Bug description:
  [Impact]

   * one-grub has loosed the dependencies between src:grub2-signed and
  src:grub2, specifically grub2-common. However the modules in grub
  modules built by src:grbu2-unsigned require a high enough version of
  grub2-common with support for R_X86_64_PLT32 relocations. Generate
  depends that are high enough, for older releases.

  Otherwise users that have grub-efi-amd64-signed installed may get
  errors upon trying to configure the package from `grub-install` unable
  to handle unknown relocation.

  [Test Plan]

   * Disable -proposed

   * Install grub-efi-amd64-signed

   * Enable -proposed

   * Install grub-efi-amd64-signed (again)

   * Observe that not only grub-efi-amd64-signed is upgraded, but also
  that new version of grub2-common are upgraded too, on bionic and
  earlier series.

  
  [Where problems could occur]

   * As one-grub evolves, similar dep updates may be required in the
  future again. Thus every one-grub update should be tested across all
  releases prior to upload into -proposed.

  [Other Info]
   
   * This bug also reported at https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1917509

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-signed/+bug/1920008/+subscriptions