[Bug 2032586] Re: [3.0][bug] Missing a 'grub-install' settings for classic image

[Laider Lai]

The issue is found in OEM IoT images in mid-2023.
(The OEM PC images are fine due to they use livecd-rootfs to build the image and the issue is covered by https://git.launchpad.net/ubuntu/+source/livecd-rootfs/tree/live-build/buildd/hooks/02-disk-image-uefi.binary?h=applied/ubuntu/jammy-devel#n101)

The impacted OEM IoT projects are all fixed by an OTA update (apt update meta-pkg) and we do grub-install after ubuntu-image build out the image to handle this issue for any new release images until now.
(https://git.launchpad.net/~lyoncore-team/lyoncore/+git/iot-image-builds/tree/build-classic.sh?h=classic#n416)

But we hope the "grub-install" operations can be supported into ubuntu-
image by default would be better.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to Ubuntu Image.
https://bugs.launchpad.net/bugs/2032586

Title:
  [3.0][bug] Missing a 'grub-install' settings for classic image

Status in Ubuntu Image:
  New

Bug description:
  Hi,

  We found if the classic image, which is generated by ubuntu-image 3.0,
  uses grub-efi as its boot assets, the classic environment can't update
  its shim.efi and grub.efi files correctly by "sudo apt upgrade".

  Because its grub Debian package manifest settings are not correct.
  Please reference the description from livecd-rootfs: https://git.launchpad.net/ubuntu/+source/livecd-rootfs/tree/live-build/buildd/hooks/02-disk-image-uefi.binary?h=applied/ubuntu/jammy-devel#n101

  Could ubuntu-image 3.0 support to setup correct grub Debian package
  manifest?

  [Reproduce steps]
  1. Build an amd64 classic image that uses grub-efi boot assets
  2. Bootup image and make sure there is a newer shim-signed and grub-efi-amd64-signed
  3. "sudo apt update" and "sudo apt upgrade" to update newer shim-signed and grub-efi-amd64-signed
  4. Check the checksum result for /boot/efi/EFI/ubuntu/shimx64.efi and grubx64.efi
  5. The checksum result still the old version, not newer version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-image/+bug/2032586/+subscriptions