Secure Boot broken on amd64 with grub2 2.02~beta2-25

Bug #1464959 reported by Adam Conrad
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
grub2 (Ubuntu)
Fix Released
Critical
William Grant

Bug Description

Subject says it all. Screenshot attached.

Revision history for this message
Adam Conrad (adconrad) wrote :
Revision history for this message
William Grant (wgrant) wrote :

From -24:

+# Platform-specific modules
+case $platform in
+ amd64-efi)

That should be x86_64-efi.

William Grant (wgrant)
Changed in grub2 (Ubuntu):
assignee: nobody → William Grant (wgrant)
importance: Undecided → Critical
status: New → In Progress
Adam Conrad (adconrad)
tags: removed: block-proposed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2 - 2.02~beta2-25ubuntu1

---------------
grub2 (2.02~beta2-25ubuntu1) wily; urgency=medium

  * Fix linuxefi module to be included on x86_64-efi rather than
    amd64-efi. amd64-efi isn't a thing. (LP: #1464959)

 -- William Grant <email address hidden> Sun, 14 Jun 2015 15:52:27 +1000

Changed in grub2 (Ubuntu):
status: In Progress → Fix Released
Revision history for this message
syscon-hh (syscon-kono) wrote :

No changes in the released fix of "25ubuntu1" - same information in the boot screen!

Revision history for this message
Adam Conrad (adconrad) wrote :

25ubuntu1 definitely fixes the issue, you need to make sure you're getting all the bits (including -signed) upgraded, not just picking a few grub packages by hand to upgrade.

Revision history for this message
syscon-hh (syscon-kono) wrote :

Sorry - I type to konsole:

root@KUBUNTU:~# apt-get upgrade
Paketlisten werden gelesen... Fertig
Abhängigkeitsbaum wird aufgebaut.
Statusinformationen werden eingelesen.... Fertig
Paketaktualisierung (Upgrade) wird berechnet... Fertig
Die folgenden Pakete werden aktualisiert (Upgrade):
  grub-common grub-efi grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed
  grub2-common
7 aktualisiert, 0 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.

....

Vorbereitung zum Entpacken von .../grub-efi-amd64-signed_1.49+2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) über (1.48+2.02~beta2-25) ...

grub-efi-amd64-bin (2.02~beta2-25ubuntu1) wird eingerichtet ...
grub-efi-amd64 (2.02~beta2-25ubuntu1) wird eingerichtet ...

....

grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) wird eingerichtet ...
Installing for x86_64-efi platform.
installation beendet. Keine Fehler aufgetreten.

But the system don't boot!

Whats wrong?

Revision history for this message
syscon-hh (syscon-kono) wrote :

Some additional information:

root@USB-GNOME:~# efibootmgr
BootCurrent: 0002
Timeout: 1 seconds
BootOrder: 0002,0003,0000,0004
Boot0000* Windows Boot Manager
Boot0002* ubuntu
Boot0003* Trusty Thar
Boot0004* UEFI: SATA SSD S5FA

root@USB-GNOME:~# efibootmgr -v
...

Boot0002* ubuntu HD(1,GPT,bd042429-ef4c-4158-8a86-ae760a4bf21b,0x800,0x3f800)/File(\EFI\ubuntu\shimx64.efi)

root@USB-GNOME:~# ls -l /boot/efi/EFI/ubuntu
insgesamt 3439
-rwxr-xr-x 1 root root 126 Jun 14 11:10 grub.cfg
-rwxr-xr-x 1 root root 958840 Jun 14 11:10 grubx64.efi
-rwxr-xr-x 1 root root 1271672 Jun 14 11:10 MokManager.efi
-rwxr-xr-x 1 root root 1289424 Jun 14 11:10 shimx64.efi

Revision history for this message
syscon-hh (syscon-kono) wrote :

It look to me, there are a missing funktion on some computers!

See my comment #6 - it has provided:

 * "Installing for x86_64-efi platform"

On other computers I got it not :

root@KUBUNTU:~#apt-get upgrade

...

(Lese Datenbank ... 193730 Dateien und Verzeichnisse sind derzeit installiert.)
Vorbereitung zum Entpacken von .../grub2-common_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub2-common (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-common_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-common (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-efi_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-efi-amd64_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64 (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-efi-amd64-bin_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64-bin (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vormals nicht ausgewähltes Paket grub-efi-amd64-signed wird gewählt.
Vorbereitung zum Entpacken von .../grub-efi-amd64-signed_1.49+2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) ...
grub-common (2.02~beta2-25ubuntu1) wird eingerichtet ...
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
grub-efi-amd64-bin (2.02~beta2-25ubuntu1) wird eingerichtet ...
grub2-common (2.02~beta2-25ubuntu1) wird eingerichtet ...
grub-efi-amd64 (2.02~beta2-25ubuntu1) wird eingerichtet ...
Grub-Konfigurationsdatei wird generiert …
Found background image: /boot/grub/images/kde-wallpaper.png
Linux-Abbild gefunden: /boot/vmlinuz-4.0.0-1-generic
initrd-Abbild gefunden: /boot/initrd.img-4.0.0-1-generic
Linux-Abbild gefunden: /boot/vmlinuz-3.19.0-20-generic
initrd-Abbild gefunden: /boot/initrd.img-3.19.0-20-generic
Adding boot menu entry for EFI firmware configuration
erledigt
grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) wird eingerichtet ...
grub-efi (2.02~beta2-25ubuntu1) wird eingerichtet ...
Trigger für man-db (2.7.0.2-5) werden verarbeitet ...
Trigger für install-info (5.2.0.dfsg.1-6) werden verarbeitet ...
Trigger für systemd (220-6ubuntu1) werden verarbeitet ...
root@USB-KUBUNTU:~# efibootmgr

So it's an other malfunction to be investigated. Here I will close.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.