Bug 2115815

Summary:	shim package available in C9S is from RHEL 8
Product:	Red Hat Enterprise Linux 9	Reporter:	Timothée Ravier <travier>
Component:	shim	Assignee:	Bootloader engineering team <bootloader-eng-team>
Status:	CLOSED DEFERRED	QA Contact:	Release Test Team <release-test-team>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	CentOS Stream	CC:	bstinson, cglombek, dustymabe, jwboyer
Target Milestone:	rc	Flags:	cglombek: needinfo? (bstinson)
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-08-05 17:33:44 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Timothée Ravier 2022-08-05 13:02:28 UTC

Description of problem:

The shim packages currently available in CentOS Stream 9 are from RHEL 8 (8.2?):
shim-ia32-15-15.el8_2.x86_64.rpm
shim-x64-15-15.el8_2.x86_64.rpm

Is this as expected or should C9S builds of those be made?

Thanks!

Comment 1 Brian Stinson 2022-08-05 17:33:44 UTC

This is expected but temporary. We want to hold rebuilding shim for Stream 9 so that we can also add a root of trust for CentOS Special Interest Groups. That's currently waiting on some hardware to show up. We'll open a new bug to handle the rebuild when we're ready to do so.

Comment 2 Christian Glombek 2023-06-12 12:55:32 UTC

The ancient version of shim is still the latest in the c9s repos, which is now causing problems: https://github.com/openshift/os/issues/1237

Comment 3 Dusty Mabe 2023-06-12 14:18:56 UTC

New related bug: https://bugzilla.redhat.com/show_bug.cgi?id=2213901

Comment 4 Christian Glombek 2023-07-13 16:09:58 UTC

@bstinson are there any news on this? The old version of shim keeps us from running some important tests regarding secure boot in CentOS Stream CoreOS.