Secure Boot broken on amd64 with grub2 2.02~beta2-25

Bug #1464959 reported by Adam Conrad
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
grub2 (Ubuntu)
Critical
William Grant

Bug Description

Subject says it all. Screenshot attached.

Revision history for this message
Adam Conrad (adconrad) wrote :
Revision history for this message
William Grant (wgrant) wrote :

From -24:

+# Platform-specific modules
+case $platform in
+ amd64-efi)

That should be x86_64-efi.

William Grant (wgrant)
Changed in grub2 (Ubuntu):
assignee: nobody → William Grant (wgrant)
importance: Undecided → Critical
status: New → In Progress
Adam Conrad (adconrad)
tags: removed: block-proposed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package grub2 - 2.02~beta2-25ubuntu1

---------------
grub2 (2.02~beta2-25ubuntu1) wily; urgency=medium

  * Fix linuxefi module to be included on x86_64-efi rather than
    amd64-efi. amd64-efi isn't a thing. (LP: #1464959)

 -- William Grant <email address hidden> Sun, 14 Jun 2015 15:52:27 +1000

Changed in grub2 (Ubuntu):
status: In Progress → Fix Released
Revision history for this message
syscon-hh (syscon-kono) wrote :

No changes in the released fix of "25ubuntu1" - same information in the boot screen!

Revision history for this message
Adam Conrad (adconrad) wrote :

25ubuntu1 definitely fixes the issue, you need to make sure you're getting all the bits (including -signed) upgraded, not just picking a few grub packages by hand to upgrade.

Revision history for this message
syscon-hh (syscon-kono) wrote :

Sorry - I type to konsole:

root@KUBUNTU:~# apt-get upgrade
Paketlisten werden gelesen... Fertig
Abhängigkeitsbaum wird aufgebaut.
Statusinformationen werden eingelesen.... Fertig
Paketaktualisierung (Upgrade) wird berechnet... Fertig
Die folgenden Pakete werden aktualisiert (Upgrade):
  grub-common grub-efi grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed
  grub2-common
7 aktualisiert, 0 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.

....

Vorbereitung zum Entpacken von .../grub-efi-amd64-signed_1.49+2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) über (1.48+2.02~beta2-25) ...

grub-efi-amd64-bin (2.02~beta2-25ubuntu1) wird eingerichtet ...
grub-efi-amd64 (2.02~beta2-25ubuntu1) wird eingerichtet ...

....

grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) wird eingerichtet ...
Installing for x86_64-efi platform.
installation beendet. Keine Fehler aufgetreten.

But the system don't boot!

Whats wrong?

Revision history for this message
syscon-hh (syscon-kono) wrote :

Some additional information:

root@USB-GNOME:~# efibootmgr
BootCurrent: 0002
Timeout: 1 seconds
BootOrder: 0002,0003,0000,0004
Boot0000* Windows Boot Manager
Boot0002* ubuntu
Boot0003* Trusty Thar
Boot0004* UEFI: SATA SSD S5FA

root@USB-GNOME:~# efibootmgr -v
...

Boot0002* ubuntu HD(1,GPT,bd042429-ef4c-4158-8a86-ae760a4bf21b,0x800,0x3f800)/File(\EFI\ubuntu\shimx64.efi)

root@USB-GNOME:~# ls -l /boot/efi/EFI/ubuntu
insgesamt 3439
-rwxr-xr-x 1 root root 126 Jun 14 11:10 grub.cfg
-rwxr-xr-x 1 root root 958840 Jun 14 11:10 grubx64.efi
-rwxr-xr-x 1 root root 1271672 Jun 14 11:10 MokManager.efi
-rwxr-xr-x 1 root root 1289424 Jun 14 11:10 shimx64.efi

Revision history for this message
syscon-hh (syscon-kono) wrote :

It look to me, there are a missing funktion on some computers!

See my comment #6 - it has provided:

 * "Installing for x86_64-efi platform"

On other computers I got it not :

root@KUBUNTU:~#apt-get upgrade

...

(Lese Datenbank ... 193730 Dateien und Verzeichnisse sind derzeit installiert.)
Vorbereitung zum Entpacken von .../grub2-common_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub2-common (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-common_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-common (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-efi_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-efi-amd64_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64 (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vorbereitung zum Entpacken von .../grub-efi-amd64-bin_2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64-bin (2.02~beta2-25ubuntu1) über (2.02~beta2-25ubuntu) ...
Vormals nicht ausgewähltes Paket grub-efi-amd64-signed wird gewählt.
Vorbereitung zum Entpacken von .../grub-efi-amd64-signed_1.49+2.02~beta2-25ubuntu1_amd64.deb ...
Entpacken von grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) ...
grub-common (2.02~beta2-25ubuntu1) wird eingerichtet ...
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
grub-efi-amd64-bin (2.02~beta2-25ubuntu1) wird eingerichtet ...
grub2-common (2.02~beta2-25ubuntu1) wird eingerichtet ...
grub-efi-amd64 (2.02~beta2-25ubuntu1) wird eingerichtet ...
Grub-Konfigurationsdatei wird generiert …
Found background image: /boot/grub/images/kde-wallpaper.png
Linux-Abbild gefunden: /boot/vmlinuz-4.0.0-1-generic
initrd-Abbild gefunden: /boot/initrd.img-4.0.0-1-generic
Linux-Abbild gefunden: /boot/vmlinuz-3.19.0-20-generic
initrd-Abbild gefunden: /boot/initrd.img-3.19.0-20-generic
Adding boot menu entry for EFI firmware configuration
erledigt
grub-efi-amd64-signed (1.49+2.02~beta2-25ubuntu1) wird eingerichtet ...
grub-efi (2.02~beta2-25ubuntu1) wird eingerichtet ...
Trigger für man-db (2.7.0.2-5) werden verarbeitet ...
Trigger für install-info (5.2.0.dfsg.1-6) werden verarbeitet ...
Trigger für systemd (220-6ubuntu1) werden verarbeitet ...
root@USB-KUBUNTU:~# efibootmgr

So it's an other malfunction to be investigated. Here I will close.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers