[Bug 1065180] Re: Wrong EFI boot entry on system with secure boot

[Stéphane Graber]

18:26 < slangasek> stgraber: could you attach the output of 'sh -x
/usr/sbin/grub-install --uefi-secure-boot'?

http://paste.ubuntu.com/1271664/

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1065180

Title:
  Wrong EFI boot entry on system with secure boot

Status in “grub2” package in Ubuntu:
  New

Bug description:
  I installed shim-signed and grub-efi-amd64-signed on a system
  supporting secureboot but in setup mode.

  I then manually ran grub-install to force secureboot to be installed, confirmed that the efi partition content looks good:
  stgraber at castiana:~$ find /boot/efi/
  /boot/efi/
  /boot/efi/EFI
  /boot/efi/EFI/ubuntu
  /boot/efi/EFI/ubuntu/grubx64.efi
  /boot/efi/EFI/ubuntu/shimx64.efi
  /boot/efi/EFI/ubuntu/grub.cfg

  Then tried to boot with SecureBoot enabled with the Windows key. The
  firmware refused to boot.

  After reverting to setup mode to get the system booting again, efibootmgr reports the following ubuntu entry:
  stgraber at castiana:~$ sudo efibootmgr --verbose | grep ubuntu
  Boot0018* ubuntu	HD(1,800,2f000,fe060401-4d67-4ea8-8f0d-0f5910471a15)File(\EFI\ubuntu\grubx64.efi)

  This seems wrong as it should be booting shimx64.efi instead.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1065180/+subscriptions