[Bug 1750418] Re: package shim-signed 1.33.1~16.04.1+13-0ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

[Steve Langasek]

As I understand it the reason you don't have your ESP mounted at
/boot/efi is because you are sharing the disk between the Ubuntu host
system and the Windows guest VM, and therefore it's not safe to have it
mounted read-write on the host.

This is not a configuration that we can support.  We must be able to
update the contents of the ESP at package upgrade time, in order to
ensure your bootloader is up-to-date and secure (including in the case
of disabling secureboot due to binary drivers - because this "disabling"
is still done through shim itself).  Even if the shim and grub packages
were improved to be able to autodiscover and mount the ESP when needed,
the fact that you have the ESP "locked" by another OS makes this
impossible in your case.

I think you should create a separate ESP exclusively for Ubuntu; or,
barring that, you should make sure you stop your VM and mount the ESP
before running upgrades.

** Changed in: shim-signed (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1750418

Title:
  package shim-signed 1.33.1~16.04.1+13-0ubuntu2 failed to
  install/upgrade: subprocess installed post-installation script
  returned error exit status 1

Status in shim-signed package in Ubuntu:
  Invalid

Bug description:
  During a normal `apt full-upgrade` I got the bug. The system was
  trying to Process triggers for dbus. Also, this boot took a really
  long time (for the first time). `systemd-analyze blame` blames `apt-
  daily-upgrade.service` for taking 1 minute 29 seconds to boot.

  ProblemType: Package
  DistroRelease: Ubuntu 16.04
  Package: shim-signed 1.33.1~16.04.1+13-0ubuntu2
  ProcVersionSignature: Ubuntu 4.13.0-32.35~16.04.1-generic 4.13.13
  Uname: Linux 4.13.0-32-generic x86_64
  .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled'
  ApportVersion: 2.20.1-0ubuntu2.15
  Architecture: amd64
  BootEFIContents:
   fw
   fwupx64.efi
  Date: Mon Feb 19 13:24:40 2018
  ErrorMessage: subprocess installed post-installation script returned error exit status 1
  InstallationDate: Installed on 2017-08-15 (188 days ago)
  InstallationMedia: Ubuntu-GNOME 16.04.3 LTS "Xenial Xerus" - Release amd64 (20170801)
  RelatedPackageVersions:
   dpkg 1.18.4ubuntu1.3
   apt  1.2.25
  SecureBoot: 6   0   0   0   0
  SourcePackage: shim-signed
  Title: package shim-signed 1.33.1~16.04.1+13-0ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1750418/+subscriptions