Bug#1095743: grub-efi-amd64-signed: grub-efi-amd64 should include the bli module

Pascal Hambourg pascal at plouf.fr.eu.org
Tue Feb 11 19:17:56 GMT 2025


Control: reassign -1 src:grub2

On 11/02/2025 at 15:12, Norbert Lange wrote:
> 
> Grub implements the "Boot Loader Interface" with the
> bli module. This for ex. allows locating and mounting
> boot and esp partitions with systemd-gpt-auto-generator.
> 
> For that to work, it needs to be included in the binary,
> I havent found a way to do this, I tried:
> 
> grub-install --modules=bli ..

You cannot add modules to a signed image. grub-install will build an 
unsigned core image embedding the specified modules, but when installing 
for secure boot, it will use the monolithic signed image instead of the 
resulting unsigned core image (yes, it's a waste).

grub-efi-amd64-signed does not build monolithic images, it just signs 
the images provided by grub-efi-amd64-unsigned (and were previously 
included in grub-efi-amd64-bin). The list of modules included in 
monolithic images is defined in source package grub2, so reassigning 
this bug.



More information about the Pkg-grub-devel mailing list