[Bug 1871969] [NEW] Ubuntu booting takes a long time when secure boot is enabled

[Seija Kijin]

Public bug reported:

The Linux kernel has issues when secure boot is enabled and PTT enabled.

For starters, it causes the machine to boot twice every time I restart.
In addition, the kernel and OS is just slow. This only happened after
installing Ubuntu with secure boot enabled, and MOK manager on.

The machine should boot once, load the signed modules and kernel stuff,
and load Ubuntu without issue.

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: shim 15+1533136590.3beb971-0ubuntu1
ProcVersionSignature: Ubuntu 5.3.0-46.38~18.04.1-generic 5.3.18
Uname: Linux 5.3.0-46-generic x86_64
.proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled'
ApportVersion: 2.20.9-0ubuntu7.14
Architecture: amd64
Date: Thu Apr  9 20:13:07 2020
Dependencies:
 
EFIBootMgr:
 BootCurrent: 0000
 Timeout: 0 seconds
 BootOrder: 0000,0002
 Boot0000* ubuntu	HD(1,GPT,852024ca-15db-4ab7-9c49-0494d8af08e0,0x800,0x100000)/File(\EFI\ubuntu\shimx64.efi)
 Boot0002* UEFI: ST1000LM035-1RK172, Partition 1	HD(1,GPT,852024ca-15db-4ab7-9c49-0494d8af08e0,0x800,0x100000)/File(EFI\boot\bootx64.efi)..BO
EFITables:
 Apr 09 19:55:28 ubuntuPC kernel: efi: EFI v2.40 by American Megatrends
 Apr 09 19:55:28 ubuntuPC kernel: efi:  ACPI=0x8a5f1000  ACPI 2.0=0x8a5f1000  SMBIOS=0xf0000  SMBIOS 3.0=0xf0020  ESRT=0x8b2a8118  MEMATTR=0x86f14018 
 Apr 09 19:55:28 ubuntuPC kernel: secureboot: Secure boot disabled
 Apr 09 19:55:28 ubuntuPC kernel: esrt: Reserving ESRT space from 0x000000008b2a8118 to 0x000000008b2a8150.
GrubDiff: Binary files /boot/efi/EFI/ubuntu/grubx64.efi and /usr/lib/grub/x86_64-efi-signed/grubx64.efi.signed differ
InstallationDate: Installed on 2020-04-04 (5 days ago)
InstallationMedia: Ubuntu 18.04.4 LTS "Bionic Beaver" - Release amd64 (20200203.1)
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SecureBoot: 6   0   0   0   1
SourcePackage: shim
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: shim (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug bionic

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1871969

Title:
  Ubuntu booting takes a long time when secure boot is enabled

Status in shim package in Ubuntu:
  New

Bug description:
  The Linux kernel has issues when secure boot is enabled and PTT
  enabled.

  For starters, it causes the machine to boot twice every time I
  restart. In addition, the kernel and OS is just slow. This only
  happened after installing Ubuntu with secure boot enabled, and MOK
  manager on.

  The machine should boot once, load the signed modules and kernel
  stuff, and load Ubuntu without issue.

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: shim 15+1533136590.3beb971-0ubuntu1
  ProcVersionSignature: Ubuntu 5.3.0-46.38~18.04.1-generic 5.3.18
  Uname: Linux 5.3.0-46-generic x86_64
  .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled'
  ApportVersion: 2.20.9-0ubuntu7.14
  Architecture: amd64
  Date: Thu Apr  9 20:13:07 2020
  Dependencies:
   
  EFIBootMgr:
   BootCurrent: 0000
   Timeout: 0 seconds
   BootOrder: 0000,0002
   Boot0000* ubuntu	HD(1,GPT,852024ca-15db-4ab7-9c49-0494d8af08e0,0x800,0x100000)/File(\EFI\ubuntu\shimx64.efi)
   Boot0002* UEFI: ST1000LM035-1RK172, Partition 1	HD(1,GPT,852024ca-15db-4ab7-9c49-0494d8af08e0,0x800,0x100000)/File(EFI\boot\bootx64.efi)..BO
  EFITables:
   Apr 09 19:55:28 ubuntuPC kernel: efi: EFI v2.40 by American Megatrends
   Apr 09 19:55:28 ubuntuPC kernel: efi:  ACPI=0x8a5f1000  ACPI 2.0=0x8a5f1000  SMBIOS=0xf0000  SMBIOS 3.0=0xf0020  ESRT=0x8b2a8118  MEMATTR=0x86f14018 
   Apr 09 19:55:28 ubuntuPC kernel: secureboot: Secure boot disabled
   Apr 09 19:55:28 ubuntuPC kernel: esrt: Reserving ESRT space from 0x000000008b2a8118 to 0x000000008b2a8150.
  GrubDiff: Binary files /boot/efi/EFI/ubuntu/grubx64.efi and /usr/lib/grub/x86_64-efi-signed/grubx64.efi.signed differ
  InstallationDate: Installed on 2020-04-04 (5 days ago)
  InstallationMedia: Ubuntu 18.04.4 LTS "Bionic Beaver" - Release amd64 (20200203.1)
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SecureBoot: 6   0   0   0   1
  SourcePackage: shim
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1871969/+subscriptions