nvidia-435 is in eoan, linux-restricted-modules only builds against 430, ubiquity gives me the self-signed modules experience instead of using the Canonical-signed modules

Bug #1856407 reported by Steve Langasek
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Eoan
Fix Released
High
Seth Forshee
linux-restricted-modules (Ubuntu)
Invalid
High
Unassigned
Eoan
Fix Released
High
Seth Forshee
nvidia-graphics-drivers-435 (Ubuntu)
Confirmed
High
Unassigned
Eoan
Confirmed
Undecided
Seth Forshee
ubuntu-drivers-common (Ubuntu)
Confirmed
High
Unassigned
Eoan
Confirmed
Undecided
Seth Forshee
ubuntu-meta (Ubuntu)
New
Undecided
Unassigned
Eoan
Won't Fix
Undecided
Unassigned

Bug Description

SRU Justification

Impact: The nvidia-435 drivers are missing from linux-restricted-modules in eoan. On install ubuntu-drivers picks 435 as the newest version, and users must use self-signed dkms drivers and enroll a MOK.

Fix: Add nvidia-435 dkms builds to linux and l-r-m for eoan.

Test Case: A test build is available in ppa:sforshee/test-builds. Verify that signed drivers for nvidia-435 can be installed for eoan via the linux-modules-nvidia-435-{generic,lowlatency} packages.

Regression Potential: The nvidia-435 l-r-m drivers are new packages built from the same source as the nvidia-435 dkms driver, so regressions are unlikely.

---

The linux-restricted-modules package exists so that users who install the nvidia drivers can get known-good, signed modules instead of having to locally self-sign and enroll a signing key through MOK. But lrm in eoan is only building driver packages for nvidia 390 and 430, and nvidia 435 is present in eoan.

So on a new Ubuntu 19.10 install, ubuntu-drivers is picking 435 as the newest driver instead of using the signed 430 driver.

We should never allow the archive to get into this situation. We should be enforcing that any version of the nvidia driver that we expect ubuntu-drivers to install by default on any hardware is integrated into linux-restricted-modules, and we should ensure that ubuntu-drivers always prefers the signed drivers over other options.

Steve Langasek (vorlon)
Changed in linux-restricted-modules (Ubuntu):
importance: Undecided → High
Changed in nvidia-graphics-drivers-435 (Ubuntu):
importance: Undecided → High
Changed in ubuntu-drivers-common (Ubuntu):
importance: Undecided → High
Revision history for this message
Seth Forshee (sforshee) wrote :

I've got patches to add nvidia-435 to linux/l-r-m for eoan, will need to upload to a ppa for testing. They should be ready tormorrow.

Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux-restricted-modules (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Eoan):
assignee: nobody → Seth Forshee (sforshee)
importance: Undecided → High
status: New → In Progress
Changed in linux-restricted-modules (Ubuntu Eoan):
assignee: nobody → Seth Forshee (sforshee)
importance: Undecided → High
status: New → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in nvidia-graphics-drivers-435 (Ubuntu Eoan):
status: New → Confirmed
Changed in nvidia-graphics-drivers-435 (Ubuntu):
status: New → Confirmed
Changed in ubuntu-drivers-common (Ubuntu Eoan):
status: New → Confirmed
Changed in ubuntu-drivers-common (Ubuntu):
status: New → Confirmed
Revision history for this message
Martin Wimpress  (flexiondotorg) wrote :

Assign Seth Forshee during the desktop team meeting in #ubuntu-desktop on December 17th. If it turns out these assignments are incorrect we can reassign them.

Changed in nvidia-graphics-drivers-435 (Ubuntu Eoan):
assignee: nobody → Seth Forshee (sforshee)
Changed in ubuntu-drivers-common (Ubuntu Eoan):
assignee: nobody → Seth Forshee (sforshee)
Seth Forshee (sforshee)
description: updated
Revision history for this message
Seth Forshee (sforshee) wrote :
Revision history for this message
Seth Forshee (sforshee) wrote :

I don't think any updates to nvidia-graphics-drivers-435 are necessary. I don't know whether ubuntu-drivers-common needs to be updated.

Changed in linux-restricted-modules (Ubuntu Eoan):
status: In Progress → Fix Committed
Changed in linux (Ubuntu Eoan):
status: In Progress → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-eoan' to 'verification-done-eoan'. If the problem still exists, change the tag 'verification-needed-eoan' to 'verification-failed-eoan'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-eoan
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (27.4 KiB)

This bug was fixed in the package linux - 5.3.0-26.28

---------------
linux (5.3.0-26.28) eoan; urgency=medium

  * eoan/linux: 5.3.0-26.28 -proposed tracker (LP: #1856807)

  * nvidia-435 is in eoan, linux-restricted-modules only builds against 430,
    ubiquity gives me the self-signed modules experience instead of using the
    Canonical-signed modules (LP: #1856407)
    - Add nvidia-435 dkms build

linux (5.3.0-25.27) eoan; urgency=medium

  * eoan/linux: 5.3.0-25.27 -proposed tracker (LP: #1854762)

  * CVE-2019-14901
    - SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()

  * CVE-2019-14896 // CVE-2019-14897
    - SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor

  * CVE-2019-14895
    - SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()

  * [CML] New device id's for CMP-H (LP: #1846335)
    - mmc: sdhci-pci: Add another Id for Intel CML
    - i2c: i801: Add support for Intel Comet Lake PCH-H
    - mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial flash
    - mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs

  * i915: Display flickers (monitor loses signal briefly) during "flickerfree"
    boot, while showing the BIOS logo on a black background (LP: #1836858)
    - [Config] FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER=y

  * Please add patch fixing RK818 ID detection (LP: #1853192)
    - SAUCE: mfd: rk808: Fix RK818 ID template

  * Kernel build log filled with "/bin/bash: line 5: warning: command
    substitution: ignored null byte in input" (LP: #1853843)
    - [Debian] Fix warnings when checking for modules signatures

  * Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961)
    - r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2

  * Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360,
    Realtek ALC3246, Black Headphone Out, Front] High noise floor (LP: #1845810)
    - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360

  * no HDMI video output since GDM greeter after linux-oem-osp1 version
    5.0.0-1026 (LP: #1852386)
    - drm/i915: Add new CNL PCH ID seen on a CML platform
    - SAUCE: drm/i915: Fix detection for a CMP-V PCH

  * [broadwell-rt286, playback] Since Linux 5.2rc2 audio playback no longer
    works on Dell Venue 11 Pro 7140 (LP: #1846539)
    - [Config] Drop snd-sof-intel-bdw build
    - SAUCE: ASoC: SOF: Intel: Broadwell: clarify mutual exclusion with legacy
      driver

  * [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2
    (LP: #1847451)
    - SAUCE: tools/power turbostat: Add Cometlake support

  * External microphone can't work on some dell machines with the codec alc256
    or alc236 (LP: #1853791)
    - SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
    - SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table

  * Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection
    (LP: #1853197)
    - xfrm: Fix memleak on xfrm state destroy

  * CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
    - powerpc/64s: support nospectre_v2 cmdline option
    - powerp...

Changed in linux (Ubuntu Eoan):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-restricted-modules - 5.3.0-26.28

---------------
linux-restricted-modules (5.3.0-26.28) eoan; urgency=medium

  * Master version: 5.3.0-26.28

  * nvidia-435 is in eoan, linux-restricted-modules only builds against 430,
    ubiquity gives me the self-signed modules experience instead of using the
    Canonical-signed modules (LP: #1856407)
    - [Packaging] Add support for nvidia-435 dkms builds

linux-restricted-modules (5.3.0-25.27) eoan; urgency=medium

  * Master version: 5.3.0-25.27

  * Miscellaneous Ubuntu changes
    - debian/dkms-versions -- update from master

 -- Khalid Elmously <email address hidden> Wed, 18 Dec 2019 00:27:52 -0500

Changed in linux-restricted-modules (Ubuntu Eoan):
status: Fix Committed → Fix Released
Revision history for this message
dann frazier (dannf) wrote :

The ubuntu-drivers-common task here appears to be to change it to prefer the pre-built/signed drivers (linux-modules-nvidia-*) over the DKMS counterparts. I'd recommend at that point that we start seeding linux-modules-nvidia-[0-9]+-generic onto the desktop ISO instead of the DKMS counterparts, so the offline install experiences matches.

Revision history for this message
Brian Murray (brian-murray) wrote :

The Eoan Ermine has reached end of life, so this bug will not be fixed for that release

Changed in ubuntu-meta (Ubuntu Eoan):
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.