[00:34] tomreyn: hmmmmmm [00:35] nautilus : Depends: nautilus-data (= 1:46~beta-0ubuntu3) but 1:46.0-0ubuntu1 is to be installed [00:43] SamuelMarks: Due to backdoor in upstream xz/liblzma - downgrading the dependencies. [01:48] Bashing-om - ahhh [01:51] SamuelMarks: See: What’s happening in Noble repositories? - https://discourse.ubuntu.com/t/whats-happening-in-noble-repositories/43729 for greater info. [01:59] ahhh [06:31] Hi all; should I be able to use secureboot=on with ubuntu 24.04? [06:31] Also, what replaced http://packages.ubuntu.com/shim-signed in 24.04? [09:05] alkisg: currently noble is in a bit of flaky stage, due the xz you surely heared about [09:06] the installers are also being reworked, theres a lot going on [09:07] lotuspsychje: I've had it installed since December, I'm not installing it now. But I can't invoke the secure boot configuration dialog for some reason [09:08] I think that something has changed regarding shim, but I don't know what [09:09] i havent played much with the setups myself, maybe guiverc might know something^ [09:11] alkisg: some amd64 binaries have been removed from the archive due to the xz issue and will be rebuild in time [09:11] ahim-signed may have been one of those [09:12] *shim [09:13] if not that, then *shrug* [09:13] :p [09:14] Thank you RikMills, that might explain it... [09:15] lets just wait until the storm is over [09:15] and apt drags in updates in [09:16] yeah, at the moment even ISOs fail to build on basic deps [09:17] better be safe then sorry [09:34] I've had secure boot on at times & off at others (virtualbox is easier with it off) but haven't probably had secure-boot enabled since before 28-March (I can't recall setting but suspect it's off currently) [09:39] ok tnx guiverc [11:10] alkisg, you can also not "enable" secureboot after installation (not sure what that parameter above refers to) it need to happen at install time since the setup is completely different [13:59] ogra_: in the past, by just removing and reinstalling shim and grub-efi, it worked fine; is there an additional step now? How would one enable it afterwards? [13:59] E.g. suppose you replaced a motherboard, you wouldn't want to reinstall.. [14:01] alkisg, if you use TPM based sceboot+full disk encryption your kernel comes as a snap package ... if you do not have that setup from the installer you can not switch [14:02] Sure a new board wouldn't have the necessary TPM keys; I'm talking without involving encryption... [14:07] well, there the old way should still work i figure ... i dont think that was touched ... sorry, i thought you mean TPM based [14:18] 👍 👍 👍 [16:00] counted 298 t64 libs in Noble main, it won't be long till full migration from proposed, perhaps 24 more hours [18:53] update on xz https://discourse.ubuntu.com/t/xz-liblzma-security-update-post-2/43801 === JanC is now known as Guest856 [22:31] "pbuilder-dist noble amd64 create" is failing for me with the message "E: Couldn't find these debs: apt" from debootstrap [22:32] Is that something I'm doing wrong, or is apt legitimately missing from the noble repos right now? [22:32] full log: https://gist.github.com/cgmb/e19faab9d8e9348998884327801cc656 [23:31] cgmb: I don't know but apparently there is chaos due to the xz vulnerability and mass package rebuilding