https://bugzilla.suse.com/show_bug.cgi?id=1189841 https://bugzilla.suse.com/show_bug.cgi?id=1189841#c62 Michal Suchanek <msuchanek@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(msuchanek@suse.co | |m) | --- Comment #62 from Michal Suchanek <msuchanek@suse.com> --- (In reply to Martin Wilck from comment #60)
Michal, your new scripts cause mokutil to be called not only for the -ueficert package, but also for oridnary kernel packages (rpm-script calls cert-script).
Yes, that's expected. The ueficert script was appended to the rpm script (when there were any signing certificates) but due to the error handling the rpm script would exit before the ueficert script so it would not get executed which is this bug.
I suggest adding something like this to cert-script:
if ! mokutil --sb-state 2>/dev/null; then exit 0 fi
mokutil --sb-state succeeds on uefi systems (with and without SB) whereas it fails on BIOS systems.
Ok?
This sounds OK. Maybe also separate bug should be filed to track this. -- You are receiving this mail because: You are on the CC list for the bug.