shim(-signed)? does not boot on T420

[Andreas Hasenack]

Almost identical to bug #1925010, but the T420 is an UEFI v2.00 machine, so I'm filing this separate bug.

This is a T420 in uefi mode, but not secure boot. I was running groovy, and just upgraded to hirsute with do-release-upgrade -d. It just wouldn't boot from the disk anymore after that. Black screen, no disk activity, no ctrl-alt-del response. I always had to power cycle it.

I then performed the steps from comment 2 of that bug, and the machine booted normally after that:
"""
Can you please check that the machine boots with just grub without shim.

Aka, replace /EFI/Boot/BOOTX64.efi & /ef/ubuntu/shimx64.efi files wtih /efi/ubuntu/grubx64.efi => this could possibly be a workaround, given that secureboot is not possible on Mac platforms.
"""

My BIOS version is 1.49 (83ET79WW), model is 4177CTO. I can attach more info if needed, and it's also simple to restore the buggy behavior.

dmesg says "efi: EFI v2.00 by Lenovo"

[Andreas Hasenack (ahasenack)]

I downgraded to the shim* packages from groovy, like this:
oot@nsn7:/var/cache/apt/archives# l
total 1,1M
drwxr-xr-x 3 root root 140K abr 19 17:16 .
drwxr-xr-x 3 root root 4,0K abr 19 17:15 ..
-rw-r----- 1 root root 0 out 15 2020 lock
drwx------ 2 _apt root 4,0K abr 19 17:16 partial
-rw-r--r-- 1 root root 566K ago 3 2020 shim_15+1552672080.a4a1fbe-0ubuntu2_amd64.deb
-rw-r--r-- 1 root root 338K out 21 06:18 shim-signed_1.45+15+1552672080.a4a1fbe-0ubuntu2_amd64.deb
root@nsn7:/var/cache/apt/archives# scp shim* ~/
root@nsn7:/var/cache/apt/archives# cd
root@nsn7:~# dpkg -i shim*
dpkg: warning: downgrading shim from 15.4-0ubuntu1 to 15+1552672080.a4a1fbe-0ubuntu2
(Reading database ... 228150 files and directories currently installed.)
Preparing to unpack shim_15+1552672080.a4a1fbe-0ubuntu2_amd64.deb ...
Unpacking shim (15+1552672080.a4a1fbe-0ubuntu2) over (15.4-0ubuntu1) ...
Replaced by files in installed package shim-signed (1.46+15.4-0ubuntu1) ...
dpkg: warning: downgrading shim-signed from 1.46+15.4-0ubuntu1 to 1.45+15+1552672080.a4a1fbe-0ubuntu2
Preparing to unpack shim-signed_1.45+15+1552672080.a4a1fbe-0ubuntu2_amd64.deb ...
Unpacking shim-signed (1.45+15+1552672080.a4a1fbe-0ubuntu2) over (1.46+15.4-0ubuntu1) ...
Setting up shim (15+1552672080.a4a1fbe-0ubuntu2) ...
Setting up shim-signed (1.45+15+1552672080.a4a1fbe-0ubuntu2) ...
Installing grub to /boot/efi.
Installing for x86_64-efi platform.
Installation finished. No error reported.

And then rebooted. It failed the same way, so it seems to indicate it's not a problem with the shim, as these packages I had installed just before doing the do-release-upgrade.

[Andreas Hasenack (ahasenack)]

I then reinstalled all *grub* and *shim* packages from groovy, and the laptop reboots fine.

[Andreas Hasenack (ahasenack)]

I'm getting a list of packages that I have now, and then I will try a dist-upgrade to hirsute, and see if it breaks again, then we can compare the set.

[Steve Langasek (vorlon)]

Andreas, can we close this out? I seem to remember you saying on IRC that you were able to re-upgrade and not hit this bug; and it's now been several weeks so if there's still an issue we want to figure it out.

[Andreas Hasenack (ahasenack)]

Yes, specially since no-one else saw this. Let's close it.