Regression: boot interrupted with "error: out of memory"

[Alexey Balmashnov]

After recent upgrades (not sure, which ones in particular), boot on my system is interrupted showing message: "error: out of memory." followed by "Press any key to continue...". After pressing a key, boot continues normally, system seem to be function OK.

Update: Previous kernel version: 5.19.0-35-generic can be booted just fine, without reported interrupt.

ProblemType: Bug
DistroRelease: Ubuntu 22.10
Package: grub2-common 2.06-2ubuntu12.1
ProcVersionSignature: Ubuntu 5.19.0-38.39-generic 5.19.17
Uname: Linux 5.19.0-38-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.23.1-0ubuntu3
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
Date: Thu Mar 23 06:26:22 2023
InstallationDate: Installed on 2016-01-06 (2632 days ago)
InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
SourcePackage: grub2
UpgradeStatus: Upgraded to kinetic on 2022-10-01 (172 days ago)

[Julian Andres Klode (juliank)]

Thank you for your bug report.

Are you booting using legacy BIOS boot? If not, grub2 is the wrong package and we should reassign to grub2-unsigned.

Then we are lacking your grub-efi-amd64-signed version. Please add that. We fixed most OOM issues in the 2.06-2ubuntu14.1 update to grub2-unsigned, corresponding to 1.187.3... for the -signed package.

However, those fixes also introduced a regression on some platforms causing new OOM. Fixes for that are queued in git and the ubuntu-uefi-team PPA (but not signed yet), but there have been reports of those fixes breaking the previous fixes on other platforms.

[Alexey Balmashnov (a.balmashnov)]

Using UEFI boot.

$ apt-cache policy grub-efi-amd64-signed
grub-efi-amd64-signed:
  Installed: 1.187.3+2.06-2ubuntu14.1

[Julian Andres Klode (juliank)]

An updated grub is available for testing in 22.10 in the PPA:

ppa:ubuntu-uefi-team/ubuntu/ppa

This is not trusted by the default Ubuntu key!

To test, you need to import the PPA signing key

https://ppa.launchpadcontent.net/ubuntu-uefi-team/ppa/ubuntu/dists/kinetic/main/uefi/grub2-amd64/current/control/uefi.crt

You can convert it to DER format by running

openssl x509 -in uefi.crt -out uefi.der -outform der

and then importing it into the MOK using

mokutil --import uefi.der

Please make sure to only update grub-efi-amd64-signed and related packages from the PPA and not newer shims or similar changes, and remove the PPA immediately after, then remove the key after a new update has been published in the main archive.

[Launchpad Janitor (janitor)]

[Expired for grub2 (Ubuntu) because there has been no activity for 60 days.]