When Secure boot is enabled, grub won't load (there is an error message about security in red)

[Juksu]

Description: Ubuntu 15.04
Release: 15.04

shim:
  Asennettu: 0.8-0ubuntu2
  Ehdokas: 0.8-0ubuntu2
  Versiotaulukko:
 *** 0.8-0ubuntu2 0
        500 http://fi.archive.ubuntu.com/ubuntu/ vivid-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     0.7-0ubuntu4 0
        500 http://fi.archive.ubuntu.com/ubuntu/ vivid/main amd64 Packages

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: shim 0.8-0ubuntu2
ProcVersionSignature: Ubuntu 3.19.0-31.36-generic 3.19.8-ckt7
Uname: Linux 3.19.0-31-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.17.2-0ubuntu1.5
Architecture: amd64
CurrentDesktop: Unity
Date: Wed Oct 21 14:08:35 2015
Dependencies:

InstallationDate: Installed on 2015-08-15 (66 days ago)
InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Release amd64 (20150422)
SourcePackage: shim
UpgradeStatus: No upgrade log present (probably fresh install)

[Juksu (jluostar)]

Boot-repair bootinfo summary: http://paste.ubuntu.com/12879928

As said in the heading, Grub does not load at all when Secure Boot is enabled. There is an error message about security. Windows boots through UEFI.

This problem happens on a Lenovo T450s laptop, with dual-booting Windows and Ubuntu. Windows 8.1 Pro was preinstalled and updated to Windows 10 Pro, before the Ubuntu installation.

[Juksu (jluostar)]

here is the output of sudo gdisk -l /dev/sda

GPT fdisk (gdisk) version 0.8.10

Partition table scan:
  MBR: protective
  BSD: not present
  APM: not present
  GPT: present

Found valid GPT with protective MBR; using GPT.
Disk /dev/sda: 1000215216 sectors, 476.9 GiB
Logical sector size: 512 bytes
Disk identifier (GUID): 8AD479E6-04CC-4682-B790-9D83AF9EB26B
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 1000215182
Partitions will be aligned on 2048-sector boundaries
Total free space is 16009230 sectors (7.6 GiB)

Number Start (sector) End (sector) Size Code Name
   1 2048 616447 300.0 MiB 2700 Basic data partition
   2 616448 1012094 193.2 MiB EF00 EFI system partition
   3 1013760 1284931 132.4 MiB 0C01 Microsoft reserved ...
   4 1294336 707507611 336.7 GiB 0700 Basic data partition
   5 707508224 708466687 468.0 MiB 2700
   6 708466688 757295103 23.3 GiB 8300
   7 757295104 952971263 93.3 GiB 8300
   8 968966144 1000214527 14.9 GiB 8200

[Juksu (jluostar)]

There was an incorrect package version: grub-common:i386 installed somehow. No idea where that has come from. I removed that and installed the correct grub-common amd64 -version. After running boot-repair again, Ubuntu now loads via Grub with SecureBoot enabled, but Windows 10 has to be loaded through UEFI Bios alternative boot options (Grub does not load Win 10 at all any more).

So I guess shim works now, the wrong grub-common package interfered with it somehow.

[Steve Langasek (vorlon)]

Thanks for this follow-up. Doesn't sound like there's a bug in shim here, just a misconfiguration.

The Windows boot issue appears to be bug #1448707.