Bug 39027

Summary: grub-efi-amd64-signed needs to be updated
Product: UCS Reporter: Janek Walkenhorst <walkenhorst>
Component: GrubAssignee: Sönke Schwardt-Krummrich <schwardt>
Status: CLOSED FIXED QA Contact: Stefan Gohmann <gohmann>
Severity: critical    
Priority: P5 CC: gohmann, schwardt, walkenhorst
Version: UCS 4.0   
Target Milestone: UCS 4.0-3-errata   
Hardware: Other   
OS: Linux   
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on: 38779    
Bug Blocks: 38778    
Attachments: New version of grub-efi-amd64-signed

Description Janek Walkenhorst univentionstaff 2015-07-27 18:51:00 CEST 
+++ This bug was initially created as a clone of Bug #38779 +++

Errata #228 and #229 updated grub, but grub-efi-amd64-signed was not updated.

This leads to removal of grub-efi-amd64-signed during upgrade.
This luckily does not break the boot process but the new grub is not used.
Comment 1 Stefan Gohmann univentionstaff 2015-08-15 08:04:24 CEST 
(In reply to Janek Walkenhorst from comment #0)
> This luckily does not break the boot process but the new grub is not used.

Are you sure? We have now several reports about UEFI boot problems:
 http://forum.univention.de/viewtopic.php?f=48&t=4215&p=15898 
 Ticket #2015080621000489

We should release a new version very soon.
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2015-08-18 17:22:13 CEST 
A new version of grub-efi-amd64-signed has been built and contains a signed version of grub (originating from grub-efi-amd64-bin 2.00-18.92.201506300903).

A YAML file has been added:
2015-08-18-grub-efi-amd64-signed.yaml
Comment 3 Sönke Schwardt-Krummrich univentionstaff 2015-08-18 17:25:11 CEST 
Created attachment 7116 [details]
New version of grub-efi-amd64-signed

The attachment contains the new signed version of grub. Manual update test was successfull. QA is pending.
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2015-08-18 17:26:26 CEST 
Additionally a ucs-test script has been added that checks if for each version of grub-efi-amd64 a corresponding version of grub-egi-amd64-signed exists.
Comment 5 Stefan Gohmann univentionstaff 2015-08-19 08:46:21 CEST 
YAML: OK

Tests 4.0-2 installation + upgrade: OK

ucs-test: OK, very good!
Comment 6 Janek Walkenhorst univentionstaff 2015-08-20 13:16:35 CEST 
<http://errata.univention.de/ucs/4.0/288.html>