[Bug 1900471] Re: System with SecureBoot enabled do not boot after do-release-upgrade from Focal to Groovy

[Steve Langasek]

> Remove: shim-signed:amd64 (1.41+15+1552672080.a4a1fbe-0ubuntu1)

The issue is that a newer version of shim-signed was installed than the
version published in focal-updates, but your version of shim was older
than the one in focal-updates, so a dist-upgrade forced removal of shim-
signed and upgrade of shim.

  https://launchpad.net/ubuntu/+source/shim-
signed/1.41/+publishinghistory

This version of shim-signed was published to the focal release pocket
prior to GA, so some users still have it on their system.

We should NOT have published shim-signed 1.40.4 with a lower version
number than the highest version than had ever been in the focal release
pocket.

I believe we need to rev the shim-signed SRU in focal to 1.41.1 to
correct this issue, which is a separate one from apt choosing to remove
shim-signed.  Without this version fix, the other fix will never *reach*
users of focal who are affected by this particular bug.

** This bug is no longer a duplicate of bug 1898729
   shim can end up being removed

** Package changed: ubuntu-release-upgrader (Ubuntu) => shim-signed
(Ubuntu)

** Changed in: shim-signed (Ubuntu)
   Importance: Undecided => High

** Changed in: shim-signed (Ubuntu)
       Status: Confirmed => Triaged

** Changed in: shim-signed (Ubuntu)
       Status: Triaged => Invalid

** Also affects: shim-signed (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Changed in: shim-signed (Ubuntu Focal)
       Status: New => Triaged

** Changed in: shim-signed (Ubuntu Focal)
     Assignee: (unassigned) => Julian Andres Klode (juliank)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubuntu-release-upgrader in
Ubuntu.
https://bugs.launchpad.net/bugs/1900471

Title:
  System with SecureBoot enabled do not boot after do-release-upgrade
  from Focal to Groovy

Status in shim-signed package in Ubuntu:
  Invalid
Status in shim-signed source package in Focal:
  Triaged

Bug description:
  I just updated from Focal to Groovy using do-release-upgrade -d

  Once the upgrade complete, I performed the recommended reboot.

  On reboot, I was facing with the following message
  Selected boot image did not Authenticate. Press ,Enter> to Continue.

  Pressing Enter simply turn off the Computer.

  In order to work around this and got back to a fully working desktop with Groovy
  I had to disable SecureBoot in the Bios

  Here is additional information

  mclemenceau at MattCSpectre ~ $ efibootmgr -v
  BootCurrent: 0001
  Timeout: 0 seconds
  BootOrder: 9999,0001,0000,0002
  Boot0000* Windows Boot Manager	HD(2,GPT,2a77a871-117a-41c5-8295-9b73b3e7c100,0xfa000,0x32000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}...8................
  Boot0001* ubuntu	HD(1,GPT,2b176ba5-80f1-4cfc-8078-a847a03ad305,0x800,0x100000)/File(\EFI\ubuntu\grubx64.efi)
  Boot0002* Solid State Disk	PciRoot(0x0)/Pci(0x1d,0x0)/Pci(0x0,0x0)/NVMe(0x1,00-08-0D-03-00-1F-40-FA)/HD(1,GPT,2b176ba5-80f1-4cfc-8078-a847a03ad305,0x800,0x100000)..BO
  Boot9999* USB Drive (UEFI)	PciRoot(0x0)/Pci(0x1d,0x0)/USB(16,0)..BO

  shim-signed                                1.41+15+1552672080.a4a1fbe-0ubuntu1
  grub-efi-amd64-signed                      1.155+2.04-1ubuntu35

  ProblemType: Bug
  DistroRelease: Ubuntu 20.10
  Package: ubuntu-release-upgrader-core 1:20.10.12
  ProcVersionSignature: Ubuntu 5.8.0-23.24-generic 5.8.14
  Uname: Linux 5.8.0-23-generic x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
  ApportVersion: 2.20.11-0ubuntu50
  Architecture: amd64
  CasperMD5CheckResult: skip
  CrashDB: ubuntu
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Oct 19 12:51:40 2020
  InstallationDate: Installed on 2020-01-05 (287 days ago)
  InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
  PackageArchitecture: all
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: ubuntu-release-upgrader
  UpgradeStatus: Upgraded to groovy on 2020-10-19 (0 days ago)
  VarLogDistupgradeXorgFixuplog:
   INFO:root:/usr/bin/do-release-upgrade running
   INFO:root:No xorg.conf, exiting

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1900471/+subscriptions