[Bug 1750351] Re: (Thinkpad T470) Boot loop after update

[Moritz Baumann]

When I first encountered the problem, I first tried to let boot-repair
(run from a live system) repair my Grub installation, since I'm not too
familiar with the boot process on UEFI. It failed multiple times, even
when I disabled Secure Boot and when I enabled the CSM and tried to
install grub-pc.

In the end, the only solution that worked was to chroot into the
installed system, purge all grub and shim packages and install the
original versions. This is the current state of my installation:

> apt-mark showhold
grub-common
grub-efi-amd64
grub-efi-amd64-bin
grub-efi-amd64-signed
grub2-common
shim
shim-signed

> apt list --upgradable
Listing... Done
grub-common/artful-updates 2.02~beta3-4ubuntu7.1 amd64 [upgradable from: 2.02~beta3-4ubuntu7]
grub-efi-amd64/artful-updates 2.02~beta3-4ubuntu7.1 amd64 [upgradable from: 2.02~beta3-4ubuntu7]
grub-efi-amd64-bin/artful-updates 2.02~beta3-4ubuntu7.1 amd64 [upgradable from: 2.02~beta3-4ubuntu7]
grub-efi-amd64-signed/artful-updates 1.85.1+2.02~beta3-4ubuntu7.1 amd64 [upgradable from: 1.85+2.02~beta3-4ubuntu7]
grub2-common/artful-updates 2.02~beta3-4ubuntu7.1 amd64 [upgradable from: 2.02~beta3-4ubuntu7]
shim/artful-updates 13-0ubuntu2 amd64 [upgradable from: 0.9+1474479173.6c180c6-1ubuntu1]
shim-signed/artful-updates 1.33.1~17.10.1+13-0ubuntu2 amd64 [upgradable from: 1.32+0.9+1474479173.6c180c6-1ubuntu1]

I'm sorry that I cannot provide more details here due to my lack of
knowledge regarding the UEFI boot process. If you tell me what to look
for, I can try to provide more information. And now that I know how to
restore my system, I'd be happy to try and collect some information with
the buggy versions installed.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1750351

Title:
  (Thinkpad T470) Boot loop after update

Status in shim package in Ubuntu:
  Incomplete

Bug description:
  After upgrading shim-signed to 1.33.1~17.10.1 (and installing the grub
  updates that were published at the same time), the system is stuck in
  a boot loop. I've had to downgrade shim and grub to their release
  versions to get the system to boot again.

  The following message gets displayed before the system resets each time:
  > System BootOrder not found. Initializing defaults.
  > Creating boot entry "Boot0000" with label "ubuntu" for file "\EFI\ubuntu\shim64.efi"
  >
  > Reset system

  A similar message, without the last line, was already displayed on
  successful boots before the update.

  According to the information in bug #1747889, the Thinkpad X1 Carbon
  might be affected as well.

  ProblemType: Bug
  DistroRelease: Ubuntu 17.10
  Package: shim 0.9+1474479173.6c180c6-1ubuntu1
  ProcVersionSignature: Ubuntu 4.13.0-32.35-generic 4.13.13
  Uname: Linux 4.13.0-32-generic x86_64
  .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled'
  ApportVersion: 2.20.7-0ubuntu3.7
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Feb 19 11:10:34 2018
  Dependencies:
   
  EFITables:
   Feb 19 10:08:21 mdbauman kernel: efi: EFI v2.50 by Lenovo
   Feb 19 10:08:21 mdbauman kernel: efi:  SMBIOS=0xba69b000  SMBIOS 3.0=0xba698000  ACPI=0xbb5fe000  ACPI 2.0=0xbb5fe014  MEMATTR=0xb4a1f298 
   Feb 19 10:08:21 mdbauman kernel: Secure boot enabled and kernel locked down
   Feb 19 10:08:21 mdbauman kernel: Bluetooth: hci0: Secure boot is enabled
   Feb 19 10:18:41 mdbauman fwupd[2852]: disabling plugin because: failed to coldplug uefi: UEFI firmware updating not supported
  InstallationDate: Installed on 2017-09-09 (162 days ago)
  InstallationMedia: Ubuntu 17.10 "Artful Aardvark" - Alpha amd64 (20170926)
  SecureBoot: 6   0   0   0   1
  SourcePackage: shim
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1750351/+subscriptions