[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#911352: marked as done (shim-signed: missing Microsoft-signed version for UEFI 32bit)

Your message dated Tue, 28 May 2019 14:20:43 +0100
with message-id <20190528132043.GA18618@tack.einval.com>
and subject line Re: Bug#911352: shim-signed: missing Microsoft-signed version for UEFI 32bit
has caused the Debian Bug report #911352,
regarding shim-signed: missing Microsoft-signed version for UEFI 32bit
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
911352: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911352
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: shim-signed
Severity: normal

Dear Maintainer,

it looks like there is a 32 bit (i386) version of shim-signed missing, that is Microsoft-signed and able to boot UEFI 32bit version with enabled SecureBoot.

i have a tablet/netbook, where Windows 10 (32bit) is preinstalled.
that device has only a UEFI 32 bit.
it has no UEFI 64 option and has no option for Legacy BIOS / CSM.
but the device has a 64bit CPU.
(i think the reason why there is an UEFI32 and Windows 10 32bit preinstalled on that device, is an licence/pricepoint thing)

anyhow,
when i try to boot Debian 9.5.0 amd64 or i386, the device will not boot,
because of missing bootia32.efi on the Live DVD.
on the Debian 9.5.0 multiarch i386_amd64 netinstall media, there is bootia32.efi file,
but that is not Microsoft-signed and the boot process will stop because of wrong signature.

to be able to boot Debian 9.5.0 Live DVD (64bit and 32bit version) on that device,
an UEFI32 (i386/i686) shim (bootia32.efi) with proper Microsoft-signature is necessary,
like the existinf UEFI64 (amd64) counterpart that is Microsoft-signed properly.


-- System Information:
Debian Release: 9.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.9.0-7-686 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

--- End Message ---
--- Begin Message --- 
Forgot the -done...

On Mon, May 27, 2019 at 10:38:38PM +0100, Steve McIntyre wrote:
>On Sat, Mar 23, 2019 at 06:45:09PM +0000, Steve McIntyre wrote:
>>control: forwarded -1 https://github.com/rhboot/shim-review/issues/57
>>
>>On Fri, Oct 19, 2018 at 12:11:56AM +0200, beta-tester wrote:
>>>Package: shim-signed
>>>Severity: normal
>>>
>>>Dear Maintainer,
>>>
>>>it looks like there is a 32 bit (i386) version of shim-signed
>>>missing, that is Microsoft-signed and able to boot UEFI 32bit version
>>>with enabled SecureBoot.
>>
>>This is in progress - see
>>
>>  https://github.com/rhboot/shim-review/issues/57
>>
>>We've submitted a new version of shim for signing for all of amd64,
>>i386 and arm64.
>
>And it came back and was added to the Debian archive about a month
>ago. Closing this bug now.
>
>-- 
>Steve McIntyre, Cambridge, UK.                                steve@einval.com
>Google-bait:       http://www.debian.org/CD/free-linux-cd
>  Debian does NOT ship free CDs. Please do NOT contact the mailing
>  lists asking us to send them to you.
-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
  Armed with "Valor": "Centurion" represents quality of Discipline,
  Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
  concord the digital world while feeling safe and proud.

--- End Message ---
Reply to: