vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit 8c9d880d92f416485ccd56e9362e18047de72e68
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Mon Aug 25 08:42:34 2025 -0700
amd64, arm64: Fix issue with no passing correct arguments to grub
- When base class name is used instead of super(), the cls value passed is same
as the base and not the derived class value as expected. This results in
--target and --uefi-secure-boot arguments not being sent to grub-install. This
results in build failure on the build machine but not on development machine.
- This must be due a change that happened after testing.
Tests:
- Build amd64 image. Ensure that --target and --uefi-secure-boot arguments are
being sent to grub-install.
- Boot the built image and ensure that mokutil --sb-status shows that secure
boot is enabled. FreedomBox setup completes as expected and first wizard
finishes normally.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
commit 43d753870413cbdbd83a7d9a8304b02ad774c800
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Thu Aug 21 23:00:18 2025 -0700
passwd_in_image: Wait for nbd device to become available
Otherwise, the tool fails when trying to run partprobe. qemu-nbd does not seem
to have an option to wait for the device to become available unlike kpartx.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 8fffb0830badc3dd61bca40485068580264351ae
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Thu Aug 21 22:59:31 2025 -0700
tests: Update virtualbox test to enable EFI booting
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit a703f647597f4e64b1f2a523422bb160a7a7512a
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Tue May 27 13:41:41 2025 -0700
amd64: Build UEFI + secure boot images instead of BIOS images
- The new image is no longer compatible with BIOS booting modes. This allows to
focus on some features such as unlocking encrypted disks with TPM. PCs that
support only BIOS booting are rare. Most 64-bit machines support EFI boot mode.
We have already dropped support for 32-bit machines.
- KVM/Qemu/Virt-manager machines need additional 'ovmf' package and
configuration modification to boot in UEFI mode. VirtualBox needs configuration
change to boot in UEFI mode.
- Drop the amd_intel.py abstraction now that support for Intel's 32bit
architecture has been dropped.
Tests:
- On a virt-manager machine, enable UEFI booting (with ovmf package) and boot
the machine.
- On a VirtualBox machine, enable UEFI booting and boot the machine.
- On a physical PC, enable UEFI booting and boot the machine. Both secure boot
enabled and secure boot disabled works.
- After booting 'mokmanager --sb-status' shows that secure boot is enabled if
BIOS/UEFI has secure booting enabled.
- While running the machine, running dpkg-reconfigure linux-image* copies
grub.cfg into /boot/efi/ partition.
- While running the machine, running dpkg-reconfigure grub-efi-signed-amd64*
copies signed binaries from /usr/lib/grub/x86_64-efi-signed/ into /boot/efi/
partition.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 7b1c29be9bb76df5ec78a4485ab951a661746c41
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Tue May 27 13:36:34 2025 -0700
internal, library: Generalize setting flags on partitions
- Allow setting arbitrary flags on partitions. Flags are as defined by parted.
- Set 'esp' flag on ESP partition.
Tests:
- Build amd64 image (with EFI + secure boot changes) and notice that ESP
partition has the correct GUID and boot flag.
- Build raspberry64 image and notice that / partition has boot flag on it.
- Build a20-olinuxino-lime2 image and notice that /boot partition has boot flag
on it.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 9d2e835698880b6b456e16f000a2a644b89105de
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Tue May 27 12:50:28 2025 -0700
library: Allow passing UEFI secure boot support to grub-install
- When secure boot support is desired, signed versions of GRUB, shim, etc. are
copied to the ESP partition instead of unsigned versions with this parameter.
Tests:
- Unit tests.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
![[bug history graph]](https://qa.debian.org/data/bts/graphs/f/freedom-maker.png){kind=link}