[Bug 2112584] Re: Stop using cd-boot-images-* in noble

[Mate Kukri]

Hi Nick,

This grub upload only adds some extra pre-built binaries for BIOS and
IEEE1275. It does not change any bootloader code, and it does not even
rebuild the boot binaries for UEFI Secure Boot platforms (built by
grub2-unsigned).

The aim was to backport the removal of cd-boot-images from the ISO build
process to Noble. Originally the above debian-cd MP was meant to do that
for all arches, I believe, but it was scaled back to riscv64 as that
does not require any extra pre-built bootloader binaries:
https://code.launchpad.net/~adrianoco/debian-
cd/+git/ubuntu/+merge/484319

cd-boot-images are now considered pure technical debt and a not so good
idea, as they resulted in multiple boot incidents on Secure Boot due to
ISO images ending up with outdated bootloaders, and they have proven to
provide no tangible benefits.

With the above context, please let me know how to proceed? Or if the SRU
team wishes to keep the ISO build technical debt as opposed to the GRUB
changes? I am not so sure waiting till 24.04.4 is a good idea, given
that past precedent shows that these type of changes have a 99% chance
of not making it around such times due to business and de-
prioritisation.

Mate

P.S. Adriano is no longer @ Canonical, so I am taking over this now.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/2112584

Title:
  Stop using cd-boot-images-* in noble

Status in debian-cd package in Ubuntu:
  Invalid
Status in grub2 package in Ubuntu:
  Invalid
Status in debian-cd source package in Noble:
  Triaged
Status in grub2 source package in Noble:
  Incomplete

Bug description:
  [ Impact ]

   * The aim of this bug is to stop using the package cd-boot-images-* in noble.
     This has been done for plucky in LP: #2086841. This is similar, but an SRU.
   * Cd-boot-images caused a duplication of binary bootloader assets, resulting
     in increased workload for maintainers, and often outdated bootloader assets
     ended up in ISO images. Stopping their use will avoid that in future point
     release ISOs.

  [ Test Plan ]

   * Current Noble images are built by debian-cd using cd-boot-images-*.
     Once the a grub2 containing the MP
  https://code.launchpad.net/~adrianoco/ubuntu/+source/grub2/+git/grub2/+merge/486661 is out and a change to debian-cd not to use cd-boot-images-* is out we can
  test building daily iso images. All this has already been tested locally (a version of grub2 with the changes can be found in the ppa https://launchpad.net/~adrianoco/+archive/ubuntu/grubppa)

  [ Where problems could occur ]

  [ Other Info ]

   * Tasks:

     - Provide pre-built BIOS and IEEE1275 El-Torito images in grub2
       (MP:
  https://code.launchpad.net/~adrianoco/ubuntu/+source/grub2/+git/grub2/+merge/486661)
     - Change debian-cd not to use cd-boot-images-* (waiting for grub2 to be ready
       to send a MP for this)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debian-cd/+bug/2112584/+subscriptions