Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-76150

shim-unsigned-x64 1.5.8-2 only available in 8.8 EUS, not 8.10

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-8.10.z
    • shim-unsigned-x64
    • None
    • No
    • None
    • rhel-bootloader
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • None
    • None
    • x86_64
    • None

      I noticed that the shim-unsigned-x64 package is available in a newer version in the 8.8 CRB EUS repo than in the 8.10 CRB repo (base, since no EUS exists). This seems unexpected. For example, this means a system upgraded from an EUS version to 8.10 will have a different version of shim-unsigned-x64 installed than a system freshly installed on 8.10.

      Small repro. Let's start with 8.8, add the CRB EUS and see what's available:

      [nutanix@filer ~]$ docker run -it redhat/ubi8:8.8
      [root@2a594c8deec2 /]# subscription-manager register
      Registering to: subscription.rhsm.redhat.com:443/subscription
      Username: <username>
      Password: <password>
      The system has been registered with ID: <foo>
      The registered system name is: <bar>
      [root@2a594c8deec2 /]# subscription-manager release --set=8.8
      Release set to: 8.8
      [root@2a594c8deec2 /]# subscription-manager repos --enable=codeready-builder-for-rhel-8-x86_64-eus-rpms
      Repository 'codeready-builder-for-rhel-8-x86_64-eus-rpms' is enabled for this system.
      [root@2a594c8deec2 /]# dnf install shim-unsigned-x64
      Updating Subscription Management repositories.
      Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                            60 MB/s |  54 MB     00:00
      Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)                                                                                               79 MB/s |  61 MB     00:00
      Red Hat CodeReady Linux Builder for RHEL 8 x86_64 - Extended Update Support (RPMs)                                                                 9.6 MB/s | 9.4 MB     00:00
      Last metadata expiration check: 0:00:02 ago on Thu Jan 23 18:32:08 2025.
      Dependencies resolved.
      ===================================================================================================================================================================================
       Package                                 Architecture                 Version                             Repository                                                          Size
      ===================================================================================================================================================================================
      Installing:
       shim-unsigned-x64                       x86_64                       15.8-2.el8                          codeready-builder-for-rhel-8-x86_64-eus-rpms                       457 k
      
      Transaction Summary
      ===================================================================================================================================================================================
      Install  1 Package
      
      Total download size: 457 k
      Installed size: 1.8 M
      Is this ok [y/N]: n
      

      Now, let's see what happens on 8.10:

      [root@2a594c8deec2 /]# subscription-manager release --set=8.10
      Release set to: 8.10
      [root@2a594c8deec2 /]# dnf install shim-unsigned-x64
      Updating Subscription Management repositories.
      Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                            86 MB/s |  70 MB     00:00
      Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)                                                                                               71 MB/s |  79 MB     00:01
      Red Hat CodeReady Linux Builder for RHEL 8 x86_64 - Extended Update Support (RPMs)                                                                 0.0  B/s |   0  B     00:00
      Errors during downloading metadata for repository 'codeready-builder-for-rhel-8-x86_64-eus-rpms':
        - Status code: 404 for https://cdn.redhat.com/content/eus/rhel8/8.10/x86_64/codeready-builder/os/repodata/repomd.xml (IP: 23.222.172.83)
      Error: Failed to download metadata for repo 'codeready-builder-for-rhel-8-x86_64-eus-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
      

      Oh right, no EUS on 8.10. So let's switch to the base repo:

      [root@2a594c8deec2 /]# subscription-manager repos --disable=codeready-builder-for-rhel-8-x86_64-eus-rpms
      Repository 'codeready-builder-for-rhel-8-x86_64-eus-rpms' is disabled for this system.
      [root@2a594c8deec2 /]# subscription-manager repos --enable=codeready-builder-for-rhel-8-x86_64-rpms
      Repository 'codeready-builder-for-rhel-8-x86_64-rpms' is enabled for this system.
      [root@2a594c8deec2 /]# dnf install shim-unsigned-x64
      Updating Subscription Management repositories.
      Red Hat CodeReady Linux Builder for RHEL 8 x86_64 (RPMs)                                                                                            14 MB/s |  11 MB     00:00
      Dependencies resolved.
      ===================================================================================================================================================================================
       Package                                  Architecture                  Version                              Repository                                                       Size
      ===================================================================================================================================================================================
      Installing:
       shim-unsigned-x64                        x86_64                        15.6-1.el8                           codeready-builder-for-rhel-8-x86_64-rpms                        454 k
      
      Transaction Summary
      ===================================================================================================================================================================================
      Install  1 Package
      
      Total download size: 454 k
      Installed size: 1.8 M
      Is this ok [y/N]: n
      

      And now we're only offered an older version. The RHEL website confirms that 15.8-2 is only available in CRB EUS 8.8, but no other repo.

              bootloader-eng-team bootloader -eng-team
              flosch-ntnx Florian Schmidt
              Nutanix Confidential Group
              bootloader -eng-team bootloader -eng-team
              Release Test Team Release Test Team
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: