[Bug 2076929] Re: [SRU] Rebuild cd-boot-images-{amd64, arm64} against new shim and grub

[Andreas Hasenack]

I see in d/control this build-dependency:

               grub-efi-amd64-signed (= 1.187.6+2.06-2ubuntu14.4),

But in jammy we have:
$ rmadison grub-efi-amd64-signed | grep jammy
 grub-efi-amd64-signed | 1.180+2.06-2ubuntu7              | jammy           | amd64
 grub-efi-amd64-signed | 1.187.6+2.06-2ubuntu14.4         | jammy-security  | amd64
 grub-efi-amd64-signed | 1.187.6+2.06-2ubuntu14.4         | jammy-updates   | amd64
 grub-efi-amd64-signed | 1.187.8+2.06-2ubuntu14.5         | jammy-proposed  | amd64

So as soon as that jammy-proposed signed is released into updates, this
cd-boot-images-amd64 package here will start to fail to build?

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2076929

Title:
  [SRU] Rebuild cd-boot-images-{amd64,arm64} against new shim and grub

Status in cd-boot-images-amd64 package in Ubuntu:
  Incomplete
Status in cd-boot-images-arm64 package in Ubuntu:
  Incomplete

Bug description:
  [ Impact ]

   * Microsoft is rolling out SBAT revocations via Windows update such that
     single-boot machines with Windows won't be able to boot shim executables
     with SBAT level less than shim,4.

   * For the 22.04.5 media we would like to include the 15.8 shim so that
     it is bootable on such machines.

  [ Test Plan ]

   * Ensure that the resulting cd-boot images contain our 15.8-0ubuntu1 MS UEFI
     CA signed shim executable.

  [ Where problems could occur ]

   * Impact is limited to media built using the new cd-boot images which will go
     through the usual rigorous QA process.

   * The shim and grub that will be used as part of this process will be in the Jammy
     archive before being part of media.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cd-boot-images-amd64/+bug/2076929/+subscriptions