shim-signed:amd64 alongside shim-signed:i386 5 years later
Around 2019 I submitted
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928486 bug named
'shim-signed:amd64 cannot be installed alongside shim-signed:i386'.
My use case is that I want to be able to install both shim-signed from
amd64 architecture and shim-signed from i386 architecture and it does
not work as expected.
Sledge fixed it by using `MultiArch: same` in control (among other
reorganisation) in
https://salsa.debian.org/efi-team/shim-signed/-/commit/f3393e69ed073007cda61d57c60e5c907c4faf51
.
I have also seen that shim-unsigned package in
https://salsa.debian.org/efi-team/shim/ has the same `MultiArch: same`.
So I have a minimal docker with Debian 12 Bookworm i386 and apparently I
have problems with this.
After doing the required `dpkg --add-arquitecture amd64` I am getting
these problems:
1)
```
rbuilder@d5e354be82ee:/rescatux-build$ sudo dpkg --add-architecture amd64
rbuilder@d5e354be82ee:/rescatux-build$ sudo apt install
shim-signed:amd64 shim-signed:i386
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:
The following packages have unmet dependencies:
shim-helpers-i386-signed : Depends: shim-unsigned (>= 15.7-1) but it is
not installable
E: Unable to correct problems, you have held broken packages.
```
2)
```
rbuilder@d5e354be82ee:/rescatux-build$ sudo apt install
shim-unsigned:amd64 shim-unsigned:i386
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:
The following packages have unmet dependencies:
shim-unsigned : Conflicts: shim-unsigned:amd64 but 15.7-1 is to be
installed
shim-unsigned:amd64 : Conflicts: shim-unsigned but 15.7-1 is to be
installed
E: Unable to correct problems, you have held broken packages.
```
I know that Debian 13 shim-signed is getting rid of i386 but anyways I
want to report it here so that:
- It's maybe fixed in Debian 12.
- We avoid problems in the future with arm64 and amd64 in the same machine
.
I mean... this is an step previous to create a bug or not depending on
your feedback.
I somehow think that the `MultiArch: same` tag works quite well when
there's only package which it's in both architectures at the same time
but when there are many of them that depend on each other then something
wrong happens... so maybe an apt bug?
Any other command or combination that I should be running to give you
more feedback?
3) Well, after checking with irc it seems that this would probably be
fixed on unstable because there is a commit
https://salsa.debian.org/efi-team/shim/-/commit/13d3737c61b1950def9477e10223ea31d158fbaf
that fixes it (but, unfortunately it's after the bookworm release).
Then, maybe, also in unstable, shim-signed for i386 is removed altogether.
Anyways... if you want to check all of this just in case maybe the right
way to go is to use 'amd64 unstable' and then try something like:
dpkg --add-architecture arm64
apt install shim-signed:amd64 shim-signed:arm64
and see what happens.
adrian15
Reply to: