[Bug 1489987] Re: Secure Boot failed on Ubuntu 14.04 on Dell E7440

Sat Aug 29 21:26:44 UTC 2015

Ok, thanks for the clarification.  I overlooked that this problem
started affecting you two months ago, I didn't expect a bug report would
be based on a boot problem from so long ago.

A few things:
 - your file timestamps date back to May.  Can you attach the apt term log for *this* period? (which should be /var/log/apt/term.log.3.gz)
 - you reported this bug against shim 0.8-0ubuntu2, however the files listed in your /boot/efi/EFI/ubuntu directory do not match this version. Do you have the shim-signed package installed at all?
 - your grubx64.efi looks too small to be the one from grub-efi-amd64-signed, by a factor of 4.  Do you have grub-efi-amd64-signed installed?
 - if 'efibootmgr -v' returns no results, this means Ubuntu is unable to detect any configured EFI boot options on your system.  Did you change your system to boot in BIOS mode, and not just disable secureboot?

Since you report this against shim version 0.8-0ubuntu2, which has not
yet been released as an SRU to trusty-updates, this means that you have
trusty-proposed enabled and have installed shim from there.  There's a
good chance that you did this at a time that no corresponding version of
shim-signed was available in trusty-proposed, causing this package to be
removed from your system.  Running systems with -proposed enabled is not
generally recommended for end users, and this kind of package removal is
an unavoidable consequence of doing so.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1489987

Title:
  Secure Boot failed on Ubuntu 14.04 on Dell E7440

Status in shim package in Ubuntu:
  Incomplete

Bug description:
  (I'm following instructions from
  https://help.ubuntu.com/community/UEFI to report this here)

  On 2/07/2015 my Ubuntu 14.04 refused to boot because of the Secure
  Boot check failure. These are apt logs from the period before the
  failure:

  Start-Date: 2015-07-01  16:15:26
  Commandline: apt-get install python-igraph
  Install: libigraph0:amd64 (0.6.5-5, automatic), python-igraph:amd64 (0.6.5-1), libarpack2:amd64 (3.1.5-2, automatic)
  End-Date: 2015-07-01  16:15:28

  Start-Date: 2015-06-29  19:24:14
  Commandline: apt-get purge -y fonts-dejavu-core
  Purge: fonts-dejavu-extra:amd64 (2.34-1ubuntu1), ubuntu-desktop:amd64 (1.325), stellarium-data:amd64 (0.12.4-1), stellarium:amd64 (0.12.4-1), plymouth-label:amd64 (0.8.8-0ubuntu17.1), plymouth-theme-ubuntu-logo:amd64 (0.8.8-0ubuntu17.1), fonts-dejavu-core:amd64 (2.34-1ubuntu1)
  End-Date: 2015-06-29  19:24:36

  Start-Date: 2015-06-29  19:24:39
  Commandline: apt-get install fonts-dejavu-core -y
  Install: fonts-dejavu-core:amd64 (2.34-1ubuntu1)
  End-Date: 2015-06-29  19:24:42

  Start-Date: 2015-06-29  19:24:52
  Commandline: apt-get autoremove
  Remove: linux-tools-3.13.0-54-generic:amd64 (3.13.0-54.91), linux-tools-3.16.0-39-generic:amd64 (3.16.0-39.53~14.04.1), linux-lts-utopic-tools-3.16.0-39:amd64 (3.16.0-39.53~14.04.1), linux-tools-3.13.0-54:amd64 (3.13.0-54.91)
  End-Date: 2015-06-29  19:24:53

  /boot/efi/EFI/ubuntu$ ls -l
  total 2592
  -rwxr-xr-x 1 root root     126 May 18 21:35 grub.cfg
  -rwxr-xr-x 1 root root  119296 Jul  2 06:58 grubx64.efi
  -rwxr-xr-x 1 root root 1178240 May 18 21:35 MokManager.efi
  -rwxr-xr-x 1 root root 1355736 May 18 21:35 shimx64.efi

  'efibootmgr -v' does not output anything.

  So I didn't even upgrade anything on that day (although I'm not sure when I rebooted). I'm on Dell E7440, Ubuntu is the only OS installed. When I switched off Secure Boot in bios, it booted fine. Is this an indication that my OS was tampered with? If not, might this be a bug?

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: shim 0.8-0ubuntu2
  ProcVersionSignature: Ubuntu 3.13.0-39.66-generic 3.13.11.8
  Uname: Linux 3.13.0-39-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.13
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Fri Aug 28 19:03:03 2015
  Dependencies:

  EcryptfsInUse: Yes
  InstallationDate: Installed on 2014-10-17 (314 days ago)
  InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
  SourcePackage: shim
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1489987/+subscriptions