Bug#1051981: systemd-boot kernel postinst script calls ukify which requires python3

[Michael Biebl]

Am 15.09.23 um 11:06 schrieb Christopher Obbard:
> Package: src:systemd
> Version: 254.1-3
> Severity: important
> X-Debbugs-Cc: chris.obbard at collabora.com
> 
> Dear Maintainer,
> 
> Installing a new kernel on a system which uses systemd-boot as the
> bootloader fails if python3 is not installed. Here's the snippet from apt
> upgrade:
> 
>      /etc/kernel/postinst.d/zz-systemd-boot:
>      Installing kernel version 6.4.0-4-amd64 in systemd-boot...
>      /usr/bin/env: ‘python3’: No such file or directory
>      /usr/lib/kernel/install.d/60-ukify.install failed with exit status 127.
> 
> This renders the new kernel unusable as it never actually gets installed
> in the right place for systemd-boot.
> 
> /etc/kernel/postinst.d/zz-systemd-boot calls kernel-install, which in turn
> calls /usr/lib/kernel/install.d/60-ukify.install which calls /lib/systemd/ukify
> to attempt to create a unified kernel image. These are both python3 scripts.
> 
> To workaround this, I have deleted /usr/lib/kernel/install.d/60-ukify.install
> as we don't (yet!) create uki images with the ukify utility anyway. When
> the ukify postinst script _does_ run, it currently just detects the
> environment variable KERNEL_INSTALL_LAYOUT != "uki" (set from some config
> files) and exits early, not even creating the uki. So this is opt-in.
> 
> /lib/systemd/ukify is shipped in the systemd package along with
> /usr/lib/kernel/install.d/60-ukify.install, which I think is wrong as
> systemd package does not have the right dependencies for this script.
> 
> 
> Perhaps we should split the ukify bits into its own package (systemd-ukify)
> which depends on python3 and should be manually installed? Also this package
> can then depend on e.g. sbsigntool and other packages to actually manage
> the signing (but that can be a separate bug!).
> 

Having a separate package feels a bit like overkill for 68K

52K	/lib/systemd/ukify
8,0K	/usr/lib/kernel/install.d/60-ukify.install
8,0K	/usr/share/man/man1/ukify.1.gz


While systemd has a suggests python3, we certainly don't want a hard 
python3 dependency though.

A possible middle way could be to implement 
/usr/lib/kernel/install.d/60-ukify.install in shell, the script seems 
simple enough.

Michael


-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20230915/2d37e56a/attachment-0001.sig>