Bug 2342224

Summary: Unification of boot loader updates, phase 1
Product: [Fedora] Fedora Reporter: Aoife Moloney <amoloney>
Component: Changes TrackingAssignee: Timothée Ravier <travier>
Status: ON_QA --- QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 44CC: galileo, hhei, mlewando, nfrayer, ngompa13, teohhanhui, travier
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-03-02 14:41:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2387673    

Description Aoife Moloney 2025-01-27 10:26:10 UTC
This is a tracking bug for Change: Unification of boot loader updates, phase 1
For more details, see: https://fedoraproject.org/wiki/Changes/BootLoaderUpdatesPhase1

Begin the process of using single tool (likely bootupd) for most boot loader updates, especially grub and shim. This decouples package installation, e.g., via rpm transaction, from actual update in /boot and /boot/efi. This change does not affect zipl and systemd-boot.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Aoife Moloney 2025-01-27 11:32:19 UTC
Hi @travier , this is a reminder that the changes testable deadline is set for 4th February. Please ensure your change meets the criteria for this milestone. If you need to retarget to a later release, please do let me know.

https://docs.fedoraproject.org/en-US/program_management/changes_policy/#_change_process_milestones

Thanks!
Aoife

Comment 2 Timothée Ravier 2025-01-27 12:55:40 UTC
Thanks, we'll let you know depending on progress.

Comment 3 Timothée Ravier 2025-02-10 17:04:40 UTC
Also tracked in https://gitlab.com/fedora/bootc/tracker/-/issues/61

Comment 4 Timothée Ravier 2025-02-11 13:52:56 UTC
We are reverting the changes in Rawhide & F42 for now until we are ready on all sides.

We will likely push this change to Fedora 43.

Comment 5 Aoife Moloney 2025-02-18 00:39:38 UTC
Ack, I will make the adjustments to the change to defer it to F43. Thanks Timothée!

Comment 6 Aoife Moloney 2025-08-19 20:42:19 UTC
Dear change owner, this is a reminder that your change is required to be 100% code complete by August 26, which is the start of beta freeze. Please provide a status update on your change in the Incomplete Changes Report if you are not able to move your change to 'ON_QA' before this date. If you need to defer your change to the next Fedora release, please let me know and I will reassign this bug and the change page. Thank you kindly.

Comment 7 Aoife Moloney 2025-08-19 21:11:50 UTC
Dear change owner, this is a reminder that your change is required to be 100% code complete by August 26, which is the start of beta freeze. Please provide a status update on your change in the Incomplete Changes Report if you are not able to move your change to 'ON_QA' before this date. If you need to defer your change to the next Fedora release, please let me know and I will reassign this bug and the change page. Thank you kindly.

Comment 8 Timothée Ravier 2025-09-01 13:28:58 UTC
Things have only just landed in Rawhide so I think we'll keep this for F44.

Comment 9 Timothée Ravier 2025-09-01 14:30:43 UTC
OK, pushing this change to F44. I'll update the wiki.

Comment 10 Timothée Ravier 2025-09-01 14:33:54 UTC
I've updated the wiki. I'll let Aoife Moloney update the other parts. Thanks

Comment 11 Allison King 2026-02-03 19:38:18 UTC
Hi travier, how goes this change for F44? The testable deadline is today, February 03, 2026, and changes need to be in good shape at this point https://docs.fedoraproject.org/en-US/program_management/changes_policy/#_change_process_milestones

Please let me know if you need to defer this to F45, otherwise if you're good to go for the change to be ready to meet the testable requirements, please update the status of the tracker bug to MODIFIED.

Thanks!

Comment 12 Timothée Ravier 2026-03-18 11:43:21 UTC
I'm re-opening this bz as it has been implemented for F44. See: https://pagure.io/fesco/issue/3563#comment-1008686

Comment 13 Dragan 2026-04-30 01:52:09 UTC
This change breaks Postfix.
main.cf: smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt

Error log:
Apr 30 03:29:53 sol postfix/smtp[25366]: cannot load Certification Authority data, CAfile="/etc/pki/tls/certs/ca-bundle.crt", CApath="/etc/pki/tls/certs": disabling TLS support
Apr 30 03:29:53 sol postfix/smtp[25366]: warning: TLS library problem: error:80000002:system library::No such file or directory:crypto/bio/bss_file.c:67:calling fopen(/etc/pki/tls/certs/ca-bundle.crt, r):
Apr 30 03:29:53 sol postfix/smtp[25366]: warning: TLS library problem: error:10000080:BIO routines::no such file:crypto/bio/bss_file.c:75:
Apr 30 03:29:53 sol postfix/smtp[25366]: warning: TLS library problem: error:05880020:x509 certificate routines::BIO lib:crypto/x509/by_file.c:248:

Comment 14 Dragan 2026-04-30 01:55:00 UTC
Sorry, wrong bug id, please delete

(In reply to Dragan from comment #13)
> This change breaks Postfix.
> main.cf: smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
> 
> Error log:
> Apr 30 03:29:53 sol postfix/smtp[25366]: cannot load Certification Authority
> data, CAfile="/etc/pki/tls/certs/ca-bundle.crt",
> CApath="/etc/pki/tls/certs": disabling TLS support
> Apr 30 03:29:53 sol postfix/smtp[25366]: warning: TLS library problem:
> error:80000002:system library::No such file or
> directory:crypto/bio/bss_file.c:67:calling
> fopen(/etc/pki/tls/certs/ca-bundle.crt, r):
> Apr 30 03:29:53 sol postfix/smtp[25366]: warning: TLS library problem:
> error:10000080:BIO routines::no such file:crypto/bio/bss_file.c:75:
> Apr 30 03:29:53 sol postfix/smtp[25366]: warning: TLS library problem:
> error:05880020:x509 certificate routines::BIO lib:crypto/x509/by_file.c:248: