From 2b10be12cad126b12a33740c93e5ec48995d88bd Mon Sep 17 00:00:00 2001 From: "betsy.mcphail" Date: Tue, 3 Sep 2024 11:20:28 -0400 Subject: [PATCH] Add apt hold for shim-signed on Jammy --- setup/ubuntu/ami_init_script | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/setup/ubuntu/ami_init_script b/setup/ubuntu/ami_init_script index c7e7bbc..fb6f3ea 100644 --- a/setup/ubuntu/ami_init_script +++ b/setup/ubuntu/ami_init_script @@ -37,6 +37,12 @@ systemctl --quiet disable apt-daily-upgrade.timer apt-daily.timer +# TODO(betsymcphail): Workaround needed for Jammy only. +# Remove if/when new Jammy unprovisioned base is created +if [[ "$(lsb_release -cs)" == "jammy" ]]; then + apt-mark hold shim-signed +fi + apt-get update -o APT::Acquire::Retries=4 -qq \ || (sleep 15; apt-get update -o APT::Acquire::Retries=4 -qq) trap 'set +x; rm -rf /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin /var/lib/apt/lists/* /var/log/apt/*; set -x' EXIT