Bug#1108231: unblock: shim-signed/1.46 systemd-boot-installer/0.10

[Luca Boccassi]

Control: tags -1 -moreinfo

On Thu, 26 Jun 2025 at 19:42, Luca Boccassi <bluca at debian.org> wrote:
>
> On Thu, 26 Jun 2025 at 19:41, Paul Gevers <elbrus at debian.org> wrote:
> >
> > [re-sending because I got the grub2 mail address wrong]
> >
> > Control: tags -1 moreinfo
> >
> > Hi,
> >
> > On 23-06-2025 19:29, Luca Boccassi wrote:
> > > The latest upload of shim-signed allows alternative dependencies on
> > > the systemd-boot signed packages.
> >
> >
> > Reading the MR related to this change [1] I got the impression that the
> > bookworm branch of src:grub2 needs to land in bookworm first to prevent
> > the risks of apt removing the bootloader. AFAICT this didn't happen yet.
> > What's the plan here?
>
> IIRC that was waiting for this:
>
> https://salsa.debian.org/grub-team/grub/-/merge_requests/77
>
> Julian and Mate still waiting on that one before uploading to bookworm-p-u?

Julian says on Matrix:

> we don't technically need the backport in stable for testing, apt applies the Protected: yes at a package level, and will accordingly refuse to move grub from stable because the flag is set in the testing one

So I believe we don't need to wait for a grub upload in order to have
shim-signed unblocked. Thanks.