package shim-signed 1.3+0.4-0ubuntu3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

[CrazySky]

When I restart the system and login I found this bug.

ProblemType: Package
DistroRelease: Ubuntu 13.10
Package: shim-signed 1.3+0.4-0ubuntu3
ProcVersionSignature: Ubuntu 3.11.0-12.19-generic 3.11.3
Uname: Linux 3.11.0-12-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.12.5-0ubuntu2
Architecture: amd64
Date: Sun Oct 20 11:12:30 2013
DuplicateSignature: package:shim-signed:1.3+0.4-0ubuntu3:subprocess installed post-installation script returned error exit status 1
ErrorMessage: subprocess installed post-installation script returned error exit status 1
InstallationDate: Installed on 2013-04-26 (177 days ago)
InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.5)
MarkForUpload: True
SourcePackage: shim-signed
Title: package shim-signed 1.3+0.4-0ubuntu3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
UpgradeStatus: Upgraded to saucy on 2013-10-19 (1 days ago)

[CrazySky (makarovdenis11)]

Ok, I delete package shim-signed, because I have some errors. When I install this package, I have:

shim-signed
E: Sub-process /usr/bin/dpkg returned an error code (1)

[Steve Langasek (vorlon)]

The error in your logs is:

Setting up shim-signed (1.3+0.4-0ubuntu3) ...
Не указано устройство, на которое нужно выполнить установку.
Использование: grub-install [ПАРАМЕТР] [УСТРОЙСТВО_ДЛЯ_УСТАНОВКИ]
Устанавливает GRUB на устройство.

  -h, --help показать эту справку и
                          закончить работу
[...]

This error means that you are trying to install this package on a system which is not using UEFI firmware, which is not supported.

[CrazySky (makarovdenis11)]

Yes, this is my error.

My system is using UEFI firmware. This option activated in BIOS.

[Steve Langasek (vorlon)]

You are not booted under UEFI, you are booted in BIOS compatibility mode. There is no way you could get this error message if you were using the grub-efi-amd64 package, so you must be using the grub-pc package.

Considering that booting under UEFI requires repartitioning to create a special boot partition, you probably have to reinstall to get UEFI boot enabled.

[CrazySky (makarovdenis11)]

Ok, can you help me fix this problem?

In BIOS:

Legacy Support - no
Secure Boot - Yes

In attachment screen of gparted with partitions.

[Steve Langasek (vorlon)]

On Wed, Oct 23, 2013 at 10:59:41PM -0000, Денис wrote:
> In attachment screen of gparted with partitions.

Ok, that shows that you do have a /boot/efi partition. Do you have the
grub-efi-amd64 package installed?

[CrazySky (makarovdenis11)]

Yea, I don't have installed this package. I install this with apt-get install and reload my computer. Now I have message: Invalid EUFI signature. After that Windows 8 load by default :((

[Steve Langasek (vorlon)]

On Wed, Oct 23, 2013 at 11:22:09PM -0000, Денис wrote:
> Yea, I don't have installed this package.

Sorry, I don't understand what you mean here. Do you mean you do have the
grub-efi-amd64 package installed, or you don't have it installed?

> I install this with apt-get install and reload my computer. Now I have
> message: Invalid EUFI signature. After that Windows 8 load by default :((

The Windows bootloader will not boot anything not signed by the Microsoft
key, even if Secure Boot is disabled in the firmware. If your Ubuntu
install has not yet been set up for Secure Boot, you will need to disable
Secure Boot, and manually choose Ubuntu from a firmware boot menu.

If you installed grub-efi-amd64, did you also try again to install
shim-signed after that? This should be the last step to enable Secure Boot
on your Ubuntu install.

[CrazySky (makarovdenis11)]

> Sorry, I don't understand what you mean here. Do you mean you do have the
grub-efi-amd64 package installed, or you don't have it installed?

Yes, this package installed.

> The Windows bootloader will not boot anything not signed by the Microsoft
key, even if Secure Boot is disabled in the firmware. If your Ubuntu
install has not yet been set up for Secure Boot, you will need to disable
Secure Boot, and manually choose Ubuntu from a firmware boot menu.

My Ubuntu worked fine with Secure Boot in 13.04. But now in 13.10 if I enable secure boot in BIOS, I have Invalid EUFI signature error.

> If you installed grub-efi-amd64, did you also try again to install
shim-signed after that? This should be the last step to enable Secure Boot
on your Ubuntu install.

Yes, this package also installed.