package grub-efi-amd64 2.02-2ubuntu8.13 failed to install/upgrade: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 1

[Mahesh Salgaonkar]

package grub-efi-amd64 2.02-2ubuntu8.13 failed to install/upgrade: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 1

ProblemType: Package
DistroRelease: Ubuntu 18.04
Package: grub-efi-amd64 2.02-2ubuntu8.13
ProcVersionSignature: Ubuntu 4.15.0-1024.29-oem 4.15.18
Uname: Linux 4.15.0-1024-oem x86_64
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
Date: Sun Sep 29 12:12:06 2019
DistributionChannelDescriptor:
 # This is the distribution channel descriptor for the OEM CDs
 # For more information see http://wiki.ubuntu.com/DistributionChannelDescriptor
 canonical-oem-somerville-bionic-amd64-20180608-47+loki-n3-v3-whl+X32+loki-n3+X00
ErrorMessage: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 1
InstallationDate: Installed on 2019-09-29 (0 days ago)
InstallationMedia: Ubuntu 18.04 "Bionic" - Build amd64 LIVE Binary 20180608-09:38
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.15.0-1024-oem.efi.signed root=UUID=5b8500c1-09d2-4cc8-804e-1acd636a7293 ro mem_sleep_default=deep usbcore.quirks=2386:3119:k quiet splash vt.handoff=1
Python3Details: /usr/bin/python3.6, Python 3.6.8, python3-minimal, 3.6.7-1~18.04
PythonDetails: /usr/bin/python2.7, Python 2.7.15+, python-minimal, 2.7.15~rc1-1
RelatedPackageVersions:
 dpkg 1.19.0.5ubuntu2.3
 apt 1.6.12
SourcePackage: grub2
Title: package grub-efi-amd64 2.02-2ubuntu8.13 failed to install/upgrade: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 1
UpgradeStatus: No upgrade log present (probably fresh install)

[Seth Arnold (seth-arnold)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[Seth Arnold (seth-arnold)]

These lines look like the important ones from the logs:

/boot/vmlinuz-4.15.0-1024-oem.efi.signed is signed, but using an unknown key:
        Subject: CN = PPA canonical-kernel-team ppa
E: Your kernels are not signed with a key known to your firmware. This system will fail to boot in a Secure Boot environment.
dpkg: error processing package grub-efi-amd64 (--configure):
 installed grub-efi-amd64 package post-installation script subprocess returned error exit status 1

Thanks

[Brad Figg (brad-figg)]

@mahesh,

Did you subscribe to the canonical-kernel-team ppa at: https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/ppa/+packages ?

If you did, can you tell me why?