Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1197774 > unrolled thread

Bug#1071215: shim-signed 15.8 still on hold. Inconsistencies with shim-helpers-amd64-signed based on 15.8

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1071215: shim-signed 15.8 still on hold. Inconsistencies with shim-helpers-amd64-signed based on 15.8 Steve McIntyre <steve@einval.com> - 2024-05-17 22:30 +0200

#1197774 — Bug#1071215: shim-signed 15.8 still on hold. Inconsistencies with shim-helpers-amd64-signed based on 15.8

On Thu, May 16, 2024 at 11:56:19AM +0200, Eric Valette wrote:
>Package: shim-signed
>Version: 1.40+15.7-1
>Severity: normal
>
>For about two weeks, shim-helpers-amd64-signed is at version 15.8
>(I have downgraded and put it on hold) but corresponding shim-signed
>is apparently blocked and not entering unstable.
>
>Any rationale?

The process of getting a new version of shim-signed is long and
complex, and not entirely under our control:

1. Build shim, test the hell out of it.
2. Upload shim, wait for it to build, check that the binary is
   reproducible.
3. Submit a shim-review issue (or several) at
   https://github.com/rhboot/shim-review/issues .
4. Upload our binaries to Microsoft's site for signing.
5. Wait for the review (and maybe fix things), potentially multiple
   passes here.
6. Wait for the signature to come back.
7. Prepare the shim-signed package with the signed binaries, and test
   like hell.
8. Upload shim-signed.

We're currently at step 5.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
There's no sensation to compare with this
Suspended animation, A state of bliss

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web