Update GRUB test for Secure Boot support cpuid with the recent Ubuntu GRUB no longer fails, so instead let's invoke `probe` with an incomplete command line, which returns fine in SecureBoot boot environment while it fails in full GRUB session with an error message.
templates/EFI: use files from Ubuntu 18.04 Currently, the shim cannot be loaded with TianoCore (using /usr/share/edk2.git/ovmf-x64/OVMF-pure-efi.fd from https://www.kraxel.org/repos/jenkins/edk2/edk2.git-ovmf-x64-0-20180508.84.g7cd8a57599.noarch.rpm) and also fails on several systems like on the Dell XPS 13 9360 and 9370, Dell r640 (see http://ml.grml.org/pipermail/grml/2018-May/011734.html) and HP EliteBook 820 G3. Error message during boot: | Reloc 0 block size 2756420659 is invalid | Relocation failed: Unsupported
add placeholder and explanation inviting local patches to isolinux.cfg this closes grml/grml-live #45 This is unfortunately completely untested, since to multiple issues, one of them being grml/grml-live #44 and grml/grml-live #46 are still unaddressed, I cannot currently reliably build grml images. As it is a comment-only patch, this can be safely applied and I'll happily test a daily image afterwards.
updatebase.GRMLBASE: no longer install aptitude We sitched from aptitude to apt-get as package manager in FAI's package list back in commit 121b3484e, so we shouldn't strictly need aptitude any longer. The ongoing ncurses transition is failing our builds currently, so that's a good chance to make this change.
Replace /etc/apt/grml.key with /etc/apt/trusted.gpg.d/grml-archive-keyring.gpg /etc/apt/grml.key was a PGP public key block Public-Key (old) and required installation via apt-key. By instead placing a `GPG key public ring` into /etc/apt/trusted.gpg.d/grml-archive-keyring.gpg we don't need this extra apt-key invocation any longer, which might actually fail with: | E: gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation Installation of gnupg isn't enough though, since then we run into: | 10:45:56 Warning: apt-key output should not be parsed (stdout is not a terminal) | 10:45:58 gpg: can't connect to the agent: IPC connect call failed Drop old /etc/grml/fai/config/files/etc/apt/grml.key/GRMLBASE via maintscript Thanks: Antoine Beaupré <anarcat@debian.org> for a related PR in https://github.com/grml/grml-debian-keyring/pull/3
SW: drop apt-transport-https from GRMLBASE apt-transport-https is a transitional package starting with Debian/buster, so the package is no longer relevant for builds against Debian/testing + sid/unstable nowadays. If someone needs this package in grml-live builds using Debian/stretch or older Debian releases then the package should be included in local configurations.
GRMLBASE/98-clean-chroot: execute resolvconf workarounds also for systemd /etc/resolvconf/resolv.conf.d/original leaks data from the environment the ISO was built in, and /etc/resolv.conf should be empty and be filled with data from DHCP. Thanks: András Korn
ssh service: set RuntimeDirectory=sshd to work with recent openssh versions We need to set RuntimeDirectory=sshd, otherwise /run/sshd doesn't exist and service startup fails with: | grml sshd[1845]: Missing privilege separation directory: /run/sshd While at it sync our ssh service file with Debian's openssh package 1:7.6p1-2 and drop the unused ssh-bootoption.service file (we currently start ssh service via grml-autoconfig). Also see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864190 Closes grml/grml#80 Thanks: sl0n for bugreport Thanks: Darshaka Pathirana <dpat@grml.org> for feedback