Bugzilla – Bug 1007238
Updated shim not in Tumbleweed
Last modified: 2016-12-12 07:02:36 UTC
The latest updated shim (Fri Oct 7 09:31:29 UTC 2016) was built on openSUSE:Leap:42.2 instead of devel:openSUSE:Factory which is the source of the shim for Tumbleweed, so the update is only valid for Leap 42.2, not Tumbleweed.
We used to build openSUSE shim in devel:openSUSE:Factory which is based on openSUSE:Factory. The advantage is that shim always uses the latest library. However, the drawback is that we won't have a stable environment to rebuild shim for a specific signature. This caused some problems. Since we cannot rebuild shim.efi, we cannot even update shim-install or MokManager.efi. Maybe we should build shim with the latest stable release and then package the binary for Tumbleweed.
(In reply to Gary Ching-Pang Lin from comment #0) yes, unfortunately I used this binary, can't be changed easily (In reply to Gary Ching-Pang Lin from comment #1) I think this is the way to go. Factory/Tumbleweed just moves to fast, so it will be broken almost always. If that is okay for you then please adjust the packaging.
The new package, shim-leap, was checked in. Close this bug.