Bug#1108231: unblock: shim-signed/1.46 systemd-boot-installer/0.10

[Luca Boccassi <bluca@debian.org>]

On Mon, 30 Jun 2025 13:20:13 +0100 Luca Boccassi <bluca@debian.org>
wrote:
> Control: tags -1 -moreinfo
> 
> On Thu, 26 Jun 2025 at 19:42, Luca Boccassi <bluca@debian.org> wrote:
> >
> > On Thu, 26 Jun 2025 at 19:41, Paul Gevers <elbrus@debian.org>
wrote:
> > >
> > > [re-sending because I got the grub2 mail address wrong]
> > >
> > > Control: tags -1 moreinfo
> > >
> > > Hi,
> > >
> > > On 23-06-2025 19:29, Luca Boccassi wrote:
> > > > The latest upload of shim-signed allows alternative
dependencies on
> > > > the systemd-boot signed packages.
> > >
> > >
> > > Reading the MR related to this change [1] I got the impression
that the
> > > bookworm branch of src:grub2 needs to land in bookworm first to
prevent
> > > the risks of apt removing the bootloader. AFAICT this didn't
happen yet.
> > > What's the plan here?
> >
> > IIRC that was waiting for this:
> >
> > https://salsa.debian.org/grub-team/grub/-/merge_requests/77
> >
> > Julian and Mate still waiting on that one before uploading to
bookworm-p-u?
> 
> Julian says on Matrix:
> 
> > we don't technically need the backport in stable for testing, apt
applies the Protected: yes at a package level, and will accordingly
refuse to move grub from stable because the flag is set in the testing
one
> 
> So I believe we don't need to wait for a grub upload in order to have
> shim-signed unblocked. Thanks.

systemd-boot-installer has been pulled into testing (and into D-I RC2),
but shim-signed wasn't, despite the single unblock ticket grouping
them. So now the functionality is broken in D-I RC2. If possible, it
would be great if this was processed soon, to unbreak it, please.

Thanks!