[Bug 1489987] Re: Secure Boot failed on Ubuntu 14.04 on Dell E7440

[Steve Langasek]

ok, so the term.log.3.gz shows the upgrade from May 18, and it appears
that at that time you *did* have grub-efi-amd64-signed installed and
probably also shim-signed.

The timestamp on the grubx64.efi is from July 2, which is when you say
the problem started.  But your apt log for this time period does not
show any package changes at that time.

Please also attach /var/log/apt/term.log.2.gz for completeness.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1489987

Title:
  Secure Boot failed on Ubuntu 14.04 on Dell E7440

Status in shim package in Ubuntu:
  Incomplete

Bug description:
  (I'm following instructions from
  https://help.ubuntu.com/community/UEFI to report this here)

  On 2/07/2015 my Ubuntu 14.04 refused to boot because of the Secure
  Boot check failure. These are apt logs from the period before the
  failure:

  Start-Date: 2015-07-01  16:15:26
  Commandline: apt-get install python-igraph
  Install: libigraph0:amd64 (0.6.5-5, automatic), python-igraph:amd64 (0.6.5-1), libarpack2:amd64 (3.1.5-2, automatic)
  End-Date: 2015-07-01  16:15:28

  Start-Date: 2015-06-29  19:24:14
  Commandline: apt-get purge -y fonts-dejavu-core
  Purge: fonts-dejavu-extra:amd64 (2.34-1ubuntu1), ubuntu-desktop:amd64 (1.325), stellarium-data:amd64 (0.12.4-1), stellarium:amd64 (0.12.4-1), plymouth-label:amd64 (0.8.8-0ubuntu17.1), plymouth-theme-ubuntu-logo:amd64 (0.8.8-0ubuntu17.1), fonts-dejavu-core:amd64 (2.34-1ubuntu1)
  End-Date: 2015-06-29  19:24:36

  Start-Date: 2015-06-29  19:24:39
  Commandline: apt-get install fonts-dejavu-core -y
  Install: fonts-dejavu-core:amd64 (2.34-1ubuntu1)
  End-Date: 2015-06-29  19:24:42

  Start-Date: 2015-06-29  19:24:52
  Commandline: apt-get autoremove
  Remove: linux-tools-3.13.0-54-generic:amd64 (3.13.0-54.91), linux-tools-3.16.0-39-generic:amd64 (3.16.0-39.53~14.04.1), linux-lts-utopic-tools-3.16.0-39:amd64 (3.16.0-39.53~14.04.1), linux-tools-3.13.0-54:amd64 (3.13.0-54.91)
  End-Date: 2015-06-29  19:24:53

  
  /boot/efi/EFI/ubuntu$ ls -l
  total 2592
  -rwxr-xr-x 1 root root     126 May 18 21:35 grub.cfg
  -rwxr-xr-x 1 root root  119296 Jul  2 06:58 grubx64.efi
  -rwxr-xr-x 1 root root 1178240 May 18 21:35 MokManager.efi
  -rwxr-xr-x 1 root root 1355736 May 18 21:35 shimx64.efi

  
  'efibootmgr -v' does not output anything.

  
  So I didn't even upgrade anything on that day (although I'm not sure when I rebooted). I'm on Dell E7440, Ubuntu is the only OS installed. When I switched off Secure Boot in bios, it booted fine. Is this an indication that my OS was tampered with? If not, might this be a bug?

  
  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: shim 0.8-0ubuntu2
  ProcVersionSignature: Ubuntu 3.13.0-39.66-generic 3.13.11.8
  Uname: Linux 3.13.0-39-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.13
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Fri Aug 28 19:03:03 2015
  Dependencies:

  EcryptfsInUse: Yes
  InstallationDate: Installed on 2014-10-17 (314 days ago)
  InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
  SourcePackage: shim
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1489987/+subscriptions