Broken shim-signed / grub-efi-arm64-signed dependency on Kinetic to Lunar upgrade

[Kemac]

Ubuntu: 22.10
Package: ubuntu-release-upgrader-core 1:22.10.8

Trying to perform an upgrade from Kinetic to Lunar with do-release-upgrade.
pkgProblemResolver fails with:

```
Investigating (19) shim-signed:amd64 < 1.54+15.7-0ubuntu1 @ii mK Ib >
Broken shim-signed:amd64 Depends on grub-efi-amd64-signed:amd64 < 1.187.3+2.06-2ubuntu14.1 | 1.193+2.06-2ubuntu17 @ii pumH > (>= 1.191~)
  Considering grub-efi-amd64-signed:amd64 10201 as a solution to shim-signed:amd64 5100
Broken shim-signed:amd64 Depends on grub-efi-arm64-signed:amd64 < none @un mH > (>= 1.191~)
Broken shim-signed:amd64 Depends on base-files:amd64 < 12.2ubuntu3 -> 12.3ubuntu2 @ii umU > (< 12.3)
  Considering base-files:amd64 5310 as a solution to shim-signed:amd64 5100
  Or group remove for shim-signed:amd64
  Protected prevents MarkDelete of shim-signed:amd64 < 1.54+15.7-0ubuntu1 @ii mK Ib >
Done
```

All packages are up to date to kinetic old-releases source lists. There are no broken dependencies reported.

ProblemType: Bug
DistroRelease: Ubuntu 22.10
Package: ubuntu-release-upgrader-core 1:22.10.8
ProcVersionSignature: Ubuntu 5.19.0-46.47-generic 5.19.17
Uname: Linux 5.19.0-46-generic x86_64
ApportVersion: 2.23.1-0ubuntu3.2
Architecture: amd64
CasperMD5CheckResult: unknown
CrashDB: ubuntu
CurrentDesktop: ubuntu:GNOME
Date: Fri Sep 29 17:11:00 2023
InstallationDate: Installed on 2021-01-28 (974 days ago)
InstallationMedia: Ubuntu 20.04.1 LTS "Focal Fossa" - Release amd64 (20200731)
PackageArchitecture: all
SourcePackage: ubuntu-release-upgrader
UpgradeStatus: Upgraded to kinetic on 2023-09-29 (0 days ago)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Sean Mullen (seanmullen)]

experiencing the exact same issue

[Anthony DeRosa (anthony-derosa)]

I have the same problem. Any workarounds?

[Duckboot (duckboot)]

Having problems with the same bug. Any progress?

[Alberto Luna (alberto-luna-95)]

I have the same problem, adding my logs as well here. Happy to answer any questions if needed. Thanks for your work!

[Hernán I. de la Cruz (mowstyl)]

I was having the same problem. I managed to upgrade by disabling secure boot and uninstalling shim-signed. It is not a good solution at all, this bug should be addressed, but it works.

[Vincent Ling (krups4516)]

Having the same issue on 2 different machines that I'm trying to upgrade.

Update 10-16 - both of my machines were updated. I tried at different times, changed nothing. The error just went away.

[Austin Read (ajread)]

Same issue with me! I really dont want to uninstall secure boot if possible.

[Rolmo (rolmo)]

Same issue. Attaching /var/log/dist-upgrade/apt.log

[Nathaniel Hartley (ostracon)]

Also affected and would like to keep secure boot; haven't booted into the machine for a few months so had try the EOL upgrade process, which is stopped by this issue.

[Nathaniel Hartley (ostracon)]

For anyone looking for workarounds, the most productive thread I've found so far is: https://answers.launchpad.net/ubuntu/+question/708105

[donato (stevenesdonato)]

This worked for me:

Change source.list to old-releases

sudo sed -i -re 's/([a-z]{2}.)?archive.ubuntu.com|security.ubuntu.com/old-releases.ubuntu.com/g' /etc/apt/sources.list

edit the sources.list file (using admin rights by sudo) and put a comment indicator ('#') to the beginning of the lines that contain "kinetic-updates".

Then run
sudo apt update

and re-try

sudo do-release-upgrade