The upgrade to systemd-251.2-4 removed systemd-boot and the EFI stub
glue from /usr/lib/systemd/boot. This can result in an eventual failure
to boot[1], especially when combined with a package such as `sicherboot`
that manages the installation of secure boot signed kernels.

On upgrade:
---

sicherboot: Installing 5.18.1 to ESP
objcopy: '/usr/lib/systemd/boot/efi/linuxia32.efi.stub': No such file
objcopy: --change-section-vma .initrd=0x0000000003000000 never used
objcopy: --change-section-vma .linux=0x0000000000040000 never used
objcopy: --change-section-vma .cmdline=0x0000000000030000 never used
objcopy: --change-section-vma .osrel=0x0000000000020000 never used
run-parts: /etc/initramfs/post-update.d//zz-sicherboot exited with return code 1
dpkg: error processing package initramfs-tools (--configure):
 installed initramfs-tools package post-installation script subprocess returned error exit status 1

---

I realize that some of the burden here is on sicherboot to express a
dependency on systemd-boot and systemd-boot-efi; however, this change to
the systemd package has the potential to break non-sicherboot user flows
as well.

[1] or to upgrade to new supported versions of the bootloader
transparently, potentially exposing users to security issues.

Conntrol: clone -1 -2
Control: reassign -2 sicherboot
Control: found -2 0.1.5
Control: retitle -2 Adjust dependencies for sd-boot split

It wasn't removed. It was moved into a separate package named
systemd-boot. See the corresponding NEWS entry.

  This can result in an eventual failure
there should not be a boot failure.
Of course, registering new kernels does not work anymore unless you
install systemd-boot.

Let's clone/reassign this issue to sicherboot so it can adjust its
dependencies (which should be systemd-boot | systemd (<< 251.2-3)

I'll probably add a versioned Breaks: (<< sicherboot 0.1.6)
Assuming the next upload of sicherboot will have a fixed dependency.

We believe that the bug you reported is fixed in the latest version of
systemd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1012625@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Biebl <biebl@debian.org> (supplier of updated systemd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 10 Jun 2022 23:51:50 +0200
Source: systemd
Architecture: source
Version: 251.2-5
Distribution: unstable
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Michael Biebl <biebl@debian.org>
Closes: 1012625 1012637
Changes:
 systemd (251.2-5) unstable; urgency=medium
 .
   * Tweak description of systemd-homed package
   * Move shlibs dependencies of libsystemd-shared from Pre-Depends to Depends
     (Closes: #1012637)
   * Add versioned Breaks against sicherboot for the systemd-boot split
     (Closes: #1012625)
   * Drop old Conflicts against hal from udev.
     The hal package has been gone for several release cycles, so this
     Conflicts should not be necessary anymore.
Checksums-Sha1:
 d2128c86c501d9eef19f315e34ef485e68d2c6f6 6082 systemd_251.2-5.dsc
 674850b16462de1f4ecab71666971bd170c28725 170568 systemd_251.2-5.debian.tar.xz
 99ab4fd489a6871acbc0119e22122dfc066bbad5 10419 systemd_251.2-5_source.buildinfo
Checksums-Sha256:
 23413c8c7f99176729713cd6da7170a6431f44b81acb0d79ccdbe372ff2a26bb 6082 systemd_251.2-5.dsc
 b91af2d2881a8a30cfd3d44234fcbadd4f2c8fe6aafe06138a5abb081aaf6713 170568 systemd_251.2-5.debian.tar.xz
 e2a0bc0f912891c8139e0a57705a482c2d3d7197da62fd858df995c7b06379b9 10419 systemd_251.2-5_source.buildinfo
Files:
 d680052c0aa330c8354b1989bf86012c 6082 admin optional systemd_251.2-5.dsc
 cf0a79a867dde5b73abcbbc997519950 170568 admin optional systemd_251.2-5.debian.tar.xz
 ab19a7385afd2be3079f031c0bc62abf 10419 admin optional systemd_251.2-5_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=J7Vh
-----END PGP SIGNATURE-----