Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1197774

Bug#1071215: shim-signed 15.8 still on hold. Inconsistencies with shim-helpers-amd64-signed based on 15.8

Show all headers | View raw

On Thu, May 16, 2024 at 11:56:19AM +0200, Eric Valette wrote:
>Package: shim-signed
>Version: 1.40+15.7-1
>Severity: normal
>
>For about two weeks, shim-helpers-amd64-signed is at version 15.8
>(I have downgraded and put it on hold) but corresponding shim-signed
>is apparently blocked and not entering unstable.
>
>Any rationale?

The process of getting a new version of shim-signed is long and
complex, and not entirely under our control:

1. Build shim, test the hell out of it.
2. Upload shim, wait for it to build, check that the binary is
   reproducible.
3. Submit a shim-review issue (or several) at
   https://github.com/rhboot/shim-review/issues .
4. Upload our binaries to Microsoft's site for signing.
5. Wait for the review (and maybe fix things), potentially multiple
   passes here.
6. Wait for the signature to come back.
7. Prepare the shim-signed package with the signed binaries, and test
   like hell.
8. Upload shim-signed.

We're currently at step 5.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
There's no sensation to compare with this
Suspended animation, A state of bliss

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#1071215: shim-signed 15.8 still on hold. Inconsistencies with shim-helpers-amd64-signed based on 15.8 Steve McIntyre <steve@einval.com> - 2024-05-17 22:30 +0200

csiph-web