[Bug 2110302] Re: nullboot 0.5.3 SRUs

[Launchpad Bug Tracker]

This bug was fixed in the package nullboot - 0.5.3-0ubuntu0.24.04.1

---------------
nullboot (0.5.3-0ubuntu0.24.04.1) noble; urgency=medium

  [ Mate Kukri ]
  * New upstream release 0.5.3 (LP: #2110302)
  * Build 0.5.3 against shim-signed 1.58+15.8-0ubuntu1
  * Use versioned golang-1.22

  [ Julian Andres Klode ]
  * Target Go 1.22 and update CI
  * Support building using shim from last nullboot upload
  * Build with CGO_ENABLED=0 because we don't need the cgo bits

  [ dependabot[bot] ]
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.19.0 (#105)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.30.0 (#111)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.31.0 (#109)
  * build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 (#110)

 -- Mate Kukri <mate.kukri at canonical.com>  Fri, 09 May 2025 15:24:16
+0100

** Changed in: nullboot (Ubuntu Noble)
       Status: Fix Committed => Fix Released

** Changed in: nullboot (Ubuntu Jammy)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nullboot in Ubuntu.
https://bugs.launchpad.net/bugs/2110302

Title:
  nullboot 0.5.3 SRUs

Status in nullboot package in Ubuntu:
  Invalid
Status in nullboot source package in Jammy:
  Fix Released
Status in nullboot source package in Noble:
  Fix Released

Bug description:
  [Impact]
  new upstream release; usual vendored dependency updates per Go MIR policy (vendor/ directory is automatically generated by go mod vendor based on go.mod).

  Targeted releases: noble, jammy

  [Test plan]
  * Test suite passes

  * Deploy Azure CVM and TPM FDE
  * Upgrade to this new package and reboot
  * Boot should be successful
  * Double check bios_measurements_log to ensure that the newly update shim was used for boot (https://github.com/canonical/tcglog-parser/tree/master/tcglog-dump can be used to extract checksum of the shim binary used at boot and compared to the one shipped in nullboot)

  * CPC - build new image with nullboot preinstalled, and attempt to
  register and boot such an images as first time.

  We have set block-proposed to allow testing in {noble,jammy}-proposed
  to be carried out before migration to  release pockets.

  [Where problems could occur]
  Resealing of Azure CVM machines could fail and they would need to be unlocked with a recovery key.

  NOTE: this bug follows precedent set by
  https://bugs.launchpad.net/ubuntu/+source/nullboot/+bug/2061754

  [Additional information]
  * Added the ability to fetch shim from previous nullboot to allow rebuilds against old shim on shim update (to avoid breakage if e-c-i wasnt updated)
  * Set disable CGo envvar because nullboot does not use any Cgo things.
  * Go version bumped to 1.22 due to Go compiler requirements in updated vendored dependencies.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nullboot/+bug/2110302/+subscriptions