grub-efi-amd64 2.02-2ubuntu8.10 failed to install/upgrade: grub-check-signatures: 50: /usr/share/grub/grub-check-signatures: mokutil: not found

[Leonardo Müller]

I used sudo apt update and sudo apt upgrade. 45 packages updated, 7 new installed (kernel). All kernels installed are from Ubuntu repositories, the system was upgraded a few times already. The kernels the system have:

4.15.0-45-generic
4.15.0-44-generic
4.15.0-43-generic
4.15.0-22-generic
4.10.0-26-generic
4.4.0-83-generic

Error message:

Configuring grub-efi-amd64 (2.02-2ubuntu8.10) ...
/usr/share/grub/grub-check-signatures: 50: /usr/share/grub/grub-check-signatures: mokutil: not found

[Workaround]

Install mokutil: sudo apt install mokutil

ProblemType: Package
DistroRelease: Ubuntu 18.04
Package: grub-efi-amd64 2.02-2ubuntu8.10
ProcVersionSignature: Ubuntu 4.18.0-14.15~18.04.1-generic 4.18.20
Uname: Linux 4.18.0-14-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.5
Architecture: amd64
Date: Thu Jan 31 21:53:58 2019
ErrorMessage: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 127
InstallationDate: Installed on 2017-07-24 (556 days ago)
InstallationMedia: Xubuntu 17.04 "Zesty Zapus" - Release amd64 (20170412)
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.18.0-14-generic root=UUID=984701f6-117a-4fb5-ba8e-761744701fff ro quiet
Python3Details: /usr/bin/python3.6, Python 3.6.7, python3-minimal, 3.6.7-1~18.04
PythonDetails: /usr/bin/python2.7, Python 2.7.15rc1, python-minimal, 2.7.15~rc1-1
RelatedPackageVersions:
 dpkg 1.19.0.5ubuntu2.1
 apt 1.6.8
SourcePackage: grub2
Title: package grub-efi-amd64 2.02-2ubuntu8.10 failed to install/upgrade: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 127
UpgradeStatus: Upgraded to bionic on 2018-04-27 (279 days ago)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Arnd Behring (arndbehring)]

I've also encountered this problem while installing updates on Ubuntu 18.04.2.

Digging a bit into into the postinst script I've discovered that the failure for me came from the script /usr/share/grub/grub-check-signatures (from the grub-common package). There, mokutil is called which fails for me since the mokutil package isn't installed. I think this is a missing dependency of the grub-common package. After installing mokutil, the errors about dpkg --configure configure failing vanished and for me the packages grub-efi-amd64, grub-efi-amd64-signed and grub-efi packages were successfully configured.

[Braedon Vickers (braedon-vickers)]

I had the same issue, and installing mokutil fixes it for me too. Thanks @arndbehring!

[Mtt.Castelli (mtt.castelli)]

This this bug still stands upgrading to #groovy Gorilla the next 20.10 release, thanks @arndbehring, it's all in his fix.

#
# apt install mokutil

[Claudio Desideri (happy-snizzo)]

Encountered today, fixed by installing mokutil. Package failing was grub-efi-amd64-signed. Maybe mokutil should be added as a dependency.

[Benjamin Drung (bdrung)]

/usr/share/grub/grub-check-signatures is shipped by grub-common and the code is called when on_secure_boot is true. So grub-common should depend on mokutil.