[Bug 1845289] Please test proposed package

[Adam Conrad]

Hello Joseph, or anyone else affected,

Accepted grub2-signed into eoan-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/grub2-signed/1.128.1 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested and change the tag from
verification-needed-eoan to verification-done-eoan. If it does not fix
the bug for you, please add a comment stating that, and change the tag
to verification-failed-eoan. In either case, without details of your
testing we will not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1845289

Title:
  Grub EFI amd64 no longer start EFI/Microsoft/Boot/bootmgfw.efi

Status in grub2 package in Ubuntu:
  Fix Released
Status in grub2 source package in Eoan:
  Fix Committed

Bug description:
  [Impact]
  Dual-boot users who have somehow had shim uninstalled from their system / Secure Boot disabled.

  [Test case]
  (system with dual-boot setup for Ubuntu and Windows)
  1) uninstall shim/shim-signed from the system
  2) Run 'sudo grub-install -v'; ensure grubx64.efi is installed as the ubuntu bootentry (check 'sudo efibootmgr -v')
  3) Reboot.
  4) In system firmware, ensure Secure Boot is disabled.
  5) Attempt to start Windows from the Grub menu.

  Verify that Windows is chainloaded from Grub successfully; without
  returning to the GRUB menu or restarting the whole system.

  [Regression potential]
  Minimal; this is returning the state of the code paths for linuxefi validation back to how they were in GRUB 2.02; the extra check for the Secure Boot state is unnecessary at that point since it will be run again later when validating the images. This affects all validation code paths on UEFI but the net effect of reverting that change should be nil due to the duplication of code that already exists.

  ---

  On a dual boot computer with Windows 10 Pro and Ubuntu 19.10, since a
  month, Grub was unable to boot Windows 10. Hitting the Windows entry
  line give me a 0.1s black screen and get me back to Grub Menu.

  sudo update-grub give me :

  Sourcing file `/etc/default/grub'
  Sourcing file `/etc/default/grub.d/init-select.cfg'
  Generating grub configuration file ...
  Found linux image: /boot/vmlinuz-5.3.0-10-generic
  Found initrd image: /boot/initrd.img-5.3.0-10-generic
  Found Windows Boot Manager on /dev/sda1@/EFI/Microsoft/Boot/bootmgfw.efi
  Adding boot menu entry for EFI firmware configuration
  done

  ProblemType: Bug
  DistroRelease: Ubuntu 19.10
  Package: grub-efi-amd64 2.04-1ubuntu5
  ProcVersionSignature: Ubuntu 5.3.0-10.11-generic 5.3.0-rc8
  Uname: Linux 5.3.0-10-generic x86_64
  ApportVersion: 2.20.11-0ubuntu7
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Wed Sep 25 08:01:05 2019
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=fr_FR.UTF-8
   SHELL=/bin/bash
  SourcePackage: grub2
  UpgradeStatus: Upgraded to eoan on 2018-11-14 (314 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1845289/+subscriptions