#1109984 systemd-boot does not declare an interest in the systemd-boot-signed trigger

Package:
systemd-boot
Source:
systemd-boot
Description:
simple UEFI boot manager - tools and services
Submitter:
Jarl Gullberg
Date:
2025-08-29 16:03:05 UTC
Severity:
normal
Tags:
#1109984#5
Date:
2025-07-27 16:49:28 UTC
From:
To:
Dear Maintainer,

While testing various signed configurations of systemd-boot I noticed that while
systemd-boot contains code for handling a named "systemd-boot-signed" trigger
(and, indeed, systemd-boot-efi-*-signed declare an activation of that trigger), the
package does not actually declare an interest in it.

As such, the trigger script will not be run when systemd-boot-efi-*-signed is installed
or the named trigger is explicitly triggered from another maintscript.

The code also handles a path trigger on /usr/lib/grub, but that appears to have been
intentionally removed in 9a5eea982313a208d03f29897e61298e974cc9f1.

If this is not the intended trigger to use when a new signed systemd-boot binary has been
installed and requires an update to the version installed to the ESP, please let me know
and I'll test with that instead.

#1109984#10
Date:
2025-07-31 23:43:04 UTC
From:
To:
Hello,

Bug #1109984 in systemd reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/systemd-team/systemd/-/commit/985a3c8d5632f081d3e23685284aaf2fab1fb5a2
------------------------------------------------------------------------
systemd-boot: register interest in systemd-boot-signed trigger

Follow-up for a212c36c5456f3897d7efa4668f89041ec4a0717

Closes: #1109984

Gbp-Dch: short
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1109984

#1109984#17
Date:
2025-08-05 18:50:34 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
systemd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1109984@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated systemd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 05 Aug 2025 17:19:48 +0100
Source: systemd
Architecture: source
Version: 258~rc2-1
Distribution: experimental
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1109979 1109984
Changes:
 systemd (258~rc2-1) experimental; urgency=medium
 .
   * Install usr/share/factory files and restore nsswitch.conf/pam.d/issue
     on factory reset
   * systemd-boot: register interest in systemd-boot-signed trigger
     (Closes: #1109984)
   * NEWS: fix typo (Closes: #1109979)
   * systemd-boot: fix registering/removing uncompressed kernels
   * d/t/control: prefer systemd-boot-tools if available
   * systemd-boot: make efibootmgr a dependency. Ensures efivars can be set
     up correctly
   * Update upstream source from tag 'upstream/258_rc2' Update to upstream
     version '258~rc2' with Debian dir
     164978ce9ff194871416f304705979b7d540a8e2
   * systemd-container: update lintian overrides for more false positives
Checksums-Sha1:
 6633b82109eeefbfe5514067393d61a16131f97b 8599 systemd_258~rc2-1.dsc
 79365f7635f5c3aa7041f03a11ee1a516aeb8939 16922463 systemd_258~rc2.orig.tar.gz
 a1a7ac6b0ba4c69042fac14e8a261d8d694d3610 181720 systemd_258~rc2-1.debian.tar.xz
 f8c159922d06109c5870ccbb8881450c57cc2910 14159 systemd_258~rc2-1_source.buildinfo
Checksums-Sha256:
 38e7e0da74b479c5856ed4782681f55f103420253340e750c091a0e687f79039 8599 systemd_258~rc2-1.dsc
 a47f10d6b806b2a92fbec8501a4a58d20be8e475a9d9a455f5b7f4c5f414bfe6 16922463 systemd_258~rc2.orig.tar.gz
 a556cb72be0d74a4d21978b97cb278a1221811d56a63bab98c87f00602ef0fff 181720 systemd_258~rc2-1.debian.tar.xz
 5d47e8db09232b661e2da364bfc1c8d64ed1316a93199b27c34c41db828a23f1 14159 systemd_258~rc2-1_source.buildinfo
Files:
 2784b916633264b54fed57e4a778ae2c 8599 admin optional systemd_258~rc2-1.dsc
 2ed59400a46b2dc21b8edb97f45e5afd 16922463 admin optional systemd_258~rc2.orig.tar.gz
 09a09a2d6fb6311348bc0d4b37031e38 181720 admin optional systemd_258~rc2-1.debian.tar.xz
 926bc43671b39f2b7abd5a5ba6a2200c 14159 admin optional systemd_258~rc2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=T5xF
-----END PGP SIGNATURE-----

#1109984#26
Date:
2025-08-13 00:06:32 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
systemd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1109984@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated systemd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 12 Aug 2025 21:34:13 +0100
Source: systemd
Architecture: source
Version: 258~rc2-2
Distribution: unstable
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1074433 1108803 1109098 1109979 1109984 1110569
Changes:
 systemd (258~rc2-2) unstable; urgency=medium
 .
   * Stop installing /var/lib/systemd in the package. /var/ needs to be
     handled by tmpfiles.d, not by the package, so that it can be deleted
     and recreated as needed on first boot.
   * NEWS: fixlets and adjustments (Closes: #1110569)
 .
 systemd (258~rc2-1) experimental; urgency=medium
 .
   * Install usr/share/factory files and restore nsswitch.conf/pam.d/issue
     on factory reset
   * systemd-boot: register interest in systemd-boot-signed trigger
     (Closes: #1109984)
   * NEWS: fix typo (Closes: #1109979)
   * systemd-boot: fix registering/removing uncompressed kernels
   * d/t/control: prefer systemd-boot-tools if available
   * systemd-boot: make efibootmgr a dependency. Ensures efivars can be set
     up correctly
   * Update upstream source from tag 'upstream/258_rc2' Update to upstream
     version '258~rc2' with Debian dir
     164978ce9ff194871416f304705979b7d540a8e2
   * systemd-container: update lintian overrides for more false positives
 .
 systemd (258~rc1-1) experimental; urgency=medium
 .
   * ukify: recommend sbsigntool | pesign for signing (Closes: #1108803)
   * Move bootctl zsh completion file too to new package
   * systemd-boot-tools: change architecture to linux-any. The tool can be
     used for cross-building, and it's available on all architectures, not
     just EFI ones
   * systemd-boot: fix initramfs post-update hook for uncompressed kernels
     (Closes: #1109098)
   * d/watch: remove restriction to v257.x series
   * Update upstream source from tag 'upstream/258_rc1' Update to upstream
     version '258~rc1' with Debian dir
     79d831e85f4a665f4ecdd61d0fbe6121b48ff7f3
   * Add and remove files for 258~rc1
   * Enable sd-vmspawn (Closes: #1074433)
   * NEWS: note cgroupv1 removal
   * Drop world-writable /run/lock debianism
   * Drop all workarounds that are obsolete after trixie
   * NEWS: note removal of telinit/runlevel
   * Update symbols file for 258~rc1
   * Update Lintian overrides
   * Add a few more conflicts to packages providing the same files
   * d/copyright: update paths
Checksums-Sha1:
 4e74007c2ee31d06e09b08c3c0483b701d4bf184 8599 systemd_258~rc2-2.dsc
 a1484a26bdb4207315b1679642ec83ca60fdba4f 181872 systemd_258~rc2-2.debian.tar.xz
 dd6f26c15a1e95c1c77e1e48718d6c3514e78b2b 14152 systemd_258~rc2-2_source.buildinfo
Checksums-Sha256:
 71338458f24646441f45f4921203e63f94d003c658f16b3c2f69c2c022bc7f3b 8599 systemd_258~rc2-2.dsc
 97dbcae9c90ed7ae0712ef5f8471e36bbf6aea38881aab62ac9c824989433378 181872 systemd_258~rc2-2.debian.tar.xz
 8b37cf1c2a7636bba565c52ca4357547ddf0440c4875002a8035c2b914461fb1 14152 systemd_258~rc2-2_source.buildinfo
Files:
 5d7981807149c6d0723817768cc5636e 8599 admin optional systemd_258~rc2-2.dsc
 5fc98cbb0580ec972bf9543786492738 181872 admin optional systemd_258~rc2-2.debian.tar.xz
 9a3488402abf1945b5550267bc379e1f 14152 admin optional systemd_258~rc2-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=grZj
-----END PGP SIGNATURE-----

#1109984#35
Date:
2025-08-29 16:02:51 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
systemd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1109984@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated systemd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 10 Aug 2025 15:04:51 +0100
Source: systemd
Architecture: source
Version: 257.8-1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1108803 1109098 1109979 1109984
Changes:
 systemd (257.8-1~deb13u1) trixie; urgency=medium
 .
   * ukify: recommend sbsigntool | pesign for signing (Closes: #1108803)
   * Move bootctl zsh completion file too to new package
   * systemd-boot-tools: change architecture to linux-any. The tool can be
     used for cross-building, and it's available on all architectures, not
     just EFI ones
   * systemd-boot: fix initramfs post-update hook for uncompressed kernels
     (Closes: #1109098)
   * systemd-boot: register interest in systemd-boot-signed trigger
     (Closes: #1109984)
   * NEWS: fix typo (Closes: #1109979)
   * systemd-boot: fix registering/removing uncompressed kernels
   * d/t/control: prefer systemd-boot-tools if available
   * Update upstream source from tag 'upstream/257.8' Update to upstream
     version '257.8' with Debian dir
     7153da4dd3bde82b88c5f48d704826e431373076
Checksums-Sha1:
 3f8c25159845813c432c62efb2b6955b7d66bf66 8617 systemd_257.8-1~deb13u1.dsc
 0807f84eeb6d219ae541cbab686758c744d34a9a 16385060 systemd_257.8.orig.tar.gz
 320aa28ffa336c37b087f7891fa3c5c60be684bb 182904 systemd_257.8-1~deb13u1.debian.tar.xz
 b8a1019c27039c1899d1349264757843d10d4a43 14176 systemd_257.8-1~deb13u1_source.buildinfo
Checksums-Sha256:
 33cae5644d96e7b107dbc7aba0267a1f2d276c515b973828e5be2bc5f593367e 8617 systemd_257.8-1~deb13u1.dsc
 f280278161446fe3838bedb970c7b3998043ad107f7627735a81483218c6f6f9 16385060 systemd_257.8.orig.tar.gz
 f5581e12e5cbf0fd8c250e473f289a7e66a6c4f8e4ae0762e467fee9faea5183 182904 systemd_257.8-1~deb13u1.debian.tar.xz
 77beaaf6e694a99cf78e907159f242853792529f1f16bbca7018b72e54ce7cf7 14176 systemd_257.8-1~deb13u1_source.buildinfo
Files:
 f37fa8265b765e67fc8262fb08cdd7a3 8617 admin optional systemd_257.8-1~deb13u1.dsc
 25fe5d328e22641254761f1baa74cee0 16385060 admin optional systemd_257.8.orig.tar.gz
 48955613c452757cc5b01601cf4b4e55 182904 admin optional systemd_257.8-1~deb13u1.debian.tar.xz
 3f5a1248d96f895d392b083b31424090 14176 admin optional systemd_257.8-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=mmfC
-----END PGP SIGNATURE-----