DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: ukiboot 0.2.1+git20260604.ec869c7-1

Package Information

DescriptionUEFI based A/B bootloader

Small UEFI bootloader implementing an A/B boot protocol similar to Android boot.

When installed as EFI/BOOT/BOOTX64.EFI, UKIBoot is loaded by the UEFI firmware and chainloads a UEFI binary from either the ukiboot_a or ukiboot_b partition, depending on the active boot slot.

It is primarily intended to boot Unified Kernel Images, which may contain a Linux kernel, initrd and kernel command line, optionally signed for Secure Boot. The slot handling is modelled on Android Verified Boot v2 and supports systems with UEFI firmware only.

This package contains the EFI binaries.

MaintainerChristopher Obbard <obbardc@debian.org>
Changed ByChristopher Obbard <obbardc@debian.org>
Sponsorobbardc@debian.org
Distributionunstable
Architectureamd64 i386 arm64 armhf loong64 riscv64
VCSgit: https://salsa.debian.org/debian/ukiboot.git (browse)
Closes#1138530
Trackerhttps://tracker.debian.org/pkg/ukiboot
Uploaded1 month, 29 days ago

New Package Report

.changes
Sourceukiboot
Version0.2.1+git20260604.ec869c7-1
Changed-ByChristopher Obbard
Architectureamd64 arm64 armhf i386 source
Distributionunstable
DateMon, 08 Jun 2026 12:22:45 +0100
Changelog
ukiboot (0.2.1+git20260604.ec869c7-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1138530)
.dsc
Sectionadmin
Priorityoptional
Componentmain
Package-Listukiboot deb admin optional arch=amd64,i386,arm64,armhf,loong64,riscv64
ukiboot-tools deb admin optional arch=amd64,i386,arm64,armhf,loong64,riscv64
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://gitlab.com/CentOS/automotive/src/ukiboot
Upstream-Name: ukiboot
Upstream-Contact: Alexander Larsson <alexl@redhat.com>

Files:
 *
Copyright:
 2025-2026 Alexander Larsson <alexl@redhat.com>
License: LGPL-2.1+

Files:
 debian/*
Copyright:
 2026 Christopher Obbard <obbardc@debian.org>
License: LGPL-2.1+

License: LGPL-2.1+
 This package is free software; you can redistribute it and/or modify
 it under the terms of the GNU Lesser General Public License as published
 by the Free Software Foundation; either version 2.1 of the License, or
 (at your option) any later version.
 .
 This package is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU Lesser General Public License for more details.
 .
 You should have received a copy of the GNU Lesser General Public License
 along with this package. If not, see <https://www.gnu.org/licenses/>.
Comment:
 On Debian systems, the complete text of the GNU Lesser General Public
 License version 2.1 can be found in "/usr/share/common-licenses/LGPL-2.1".

Review Information

rejected — allocated to siretart 1 month, 28 days ago, started 1 month, 28 days ago, completed 1 month, 28 days ago.

Final Comment

Thanks for your diligence on ukiboot.

I noticed a slight slip in debian/copyright where some authors found
in the source files are missing. Specifically, test/ctltest.py has a
copyright notice for Alberto Ruiz, and efi/generate_binary.py lists
Javier Martinez Canillas and Richard Hughes. These need to be
documented to properly reflect the source.

-rt

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
0.2.1+git20260604.ec869c7-1 4bd7bf36… 2026-06-10 11:20 2026-06-10 11:28 siretart accepted VIEW

Public Notes

1 month, 28 days ago ● public

Missed Author Check

Command: dnq author-check -prepare
Exit code: 0

Author check: scanned 33 files.

NOT IN debian/copyright (3):

  Alberto Ruiz <aruiz@redhat.com>
    test/ctltest.py:3

  Javier Martinez Canillas <javierm@redhat.com>
    efi/generate_binary.py:3

  Richard Hughes <richard@hughsie.com>
    efi/generate_binary.py:4

Result: ATTENTION REQUIRED — 3 authors not in debian/copyright

Back to Dashboard | View all reviews for this package