[Bug 1799767] Re: grub menu not showing with SecureBoot enabled after update

frank 1799767 at bugs.launchpad.net
Wed Oct 31 21:26:57 UTC 2018 

apport information

** Description changed:

  Started with Ubuntu Version 14.04 I always had SecureBoot enabled and also CSM (compatibility support module) enabled in BIOS of Motherboard ASUS Z170-A, BIOS 3802 03/15/2018.
  On October, 13th i did the updates that UpdateManager showed in the morning.
  
  After rebooting in the evening, afterwards the BIOS splash screen there was only a black screen. No grub menu, no booting in SecureBoot mode.
  I tried different repairs (tool boot-repair, reinstalling grub, installing signed kernel transitional packages and so on, but nothing would help.
  
  At the end I found out out, that switching CSM to disabled "solved" the
  problem and it is now reproducible: Switching CSM on, no secure boot,
  switching off, secure boot works.
  
  But I did not wont to switch CSM off.
  
  I also tried to get some help at ubuntuforum. But no luck.
  
  See here
  https://ubuntuforums.org/showthread.php?t=2404150
  
  Since today I think it's a bug in shim or grub, because at the morning
  of Oct, 13th these have been updated.
  
  Regards
  
  Frank
  
  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: ubuntu-release-upgrader-core 1:18.04.27
  ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18
  Uname: Linux 4.15.0-38-lowlatency x86_64
  ApportVersion: 2.20.9-0ubuntu7.4
  Architecture: amd64
  CrashDB: ubuntu
  CurrentDesktop: XFCE
  Date: Wed Oct 24 20:36:17 2018
  InstallationDate: Installed on 2016-04-03 (933 days ago)
  InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=de_DE
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=de_DE.UTF-8
   SHELL=/bin/bash
  SourcePackage: ubuntu-release-upgrader
  Symptom: release-upgrade
  UpgradeStatus: Upgraded to bionic on 2018-09-24 (30 days ago)
  VarLogDistupgradeTermlog:
  --- 
  ProblemType: Bug
  ApportVersion: 2.20.9-0ubuntu7.4
  Architecture: amd64
  CurrentDesktop: XFCE
  Dependencies:
   
  DistroRelease: Ubuntu 18.04
  InstallationDate: Installed on 2016-04-03 (935 days ago)
  InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
  Package: shim 15+1533136590.3beb971-0ubuntu1
  PackageArchitecture: amd64
  ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18
  Tags:  bionic
  Uname: Linux 4.15.0-38-lowlatency x86_64
  UpgradeStatus: Upgraded to bionic on 2018-09-24 (32 days ago)
  UserGroups: adm audio cdrom dialout dip lpadmin plugdev sambashare sudo vboxusers
  _MarkForUpload: True
+ --- 
+ ProblemType: Bug
+ .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] Datei oder Verzeichnis nicht gefunden: '/proc/sys/kernel/moksbstate_disabled'
+ ApportVersion: 2.20.9-0ubuntu7.4
+ Architecture: amd64
+ CurrentDesktop: XFCE
+ DistroRelease: Ubuntu 18.04
+ EFIBootMgr:
+  BootCurrent: 0001
+  Timeout: 1 seconds
+  BootOrder: 0001,0000
+  Boot0000* Windows Boot Manager	HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\MICROSOFT\BOOT\BOOTMGFW.EFI)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}....................
+  Boot0001* ubuntu	HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\UBUNTU\SHIMX64.EFI)
+ EFITables:
+  Okt 31 22:22:51 Zuse2016 kernel: efi: EFI v2.50 by American Megatrends
+  Okt 31 22:22:51 Zuse2016 kernel: efi:  ESRT=0x8b1add98  ACPI=0x8a217000  ACPI 2.0=0x8a217000  SMBIOS=0x8b1ab000  SMBIOS 3.0=0x8b1aa000 
+  Okt 31 22:22:51 Zuse2016 kernel: secureboot: Secure boot enabled
+  Okt 31 22:22:51 Zuse2016 kernel: esrt: Reserving ESRT space from 0x000000008b1add98 to 0x000000008b1addd0.
+ InstallationDate: Installed on 2016-04-03 (941 days ago)
+ InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
+ Package: shim-signed 1.37~18.04.2+15+1533136590.3beb971-0ubuntu1
+ PackageArchitecture: amd64
+ ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18
+ SecureBoot: 6   0   0   0   1
+ Tags:  bionic
+ Uname: Linux 4.15.0-38-lowlatency x86_64
+ UpgradeStatus: Upgraded to bionic on 2018-09-24 (37 days ago)
+ UserGroups: adm audio cdrom dialout dip lpadmin plugdev sambashare sudo vboxusers
+ _MarkForUpload: True

** Attachment added: "BootEFIContents.txt"
   https://bugs.launchpad.net/bugs/1799767/+attachment/5207652/+files/BootEFIContents.txt

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1799767

Title:
  grub menu not showing with SecureBoot enabled after update

Status in shim-signed package in Ubuntu:
  Incomplete

Bug description:
  Started with Ubuntu Version 14.04 I always had SecureBoot enabled and also CSM (compatibility support module) enabled in BIOS of Motherboard ASUS Z170-A, BIOS 3802 03/15/2018.
  On October, 13th i did the updates that UpdateManager showed in the morning.

  After rebooting in the evening, afterwards the BIOS splash screen there was only a black screen. No grub menu, no booting in SecureBoot mode.
  I tried different repairs (tool boot-repair, reinstalling grub, installing signed kernel transitional packages and so on, but nothing would help.

  At the end I found out out, that switching CSM to disabled "solved"
  the problem and it is now reproducible: Switching CSM on, no secure
  boot, switching off, secure boot works.

  But I did not wont to switch CSM off.

  I also tried to get some help at ubuntuforum. But no luck.

  See here
  https://ubuntuforums.org/showthread.php?t=2404150

  Since today I think it's a bug in shim or grub, because at the morning
  of Oct, 13th these have been updated.

  Regards

  Frank

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: ubuntu-release-upgrader-core 1:18.04.27
  ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18
  Uname: Linux 4.15.0-38-lowlatency x86_64
  ApportVersion: 2.20.9-0ubuntu7.4
  Architecture: amd64
  CrashDB: ubuntu
  CurrentDesktop: XFCE
  Date: Wed Oct 24 20:36:17 2018
  InstallationDate: Installed on 2016-04-03 (933 days ago)
  InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=de_DE
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=de_DE.UTF-8
   SHELL=/bin/bash
  SourcePackage: ubuntu-release-upgrader
  Symptom: release-upgrade
  UpgradeStatus: Upgraded to bionic on 2018-09-24 (30 days ago)
  VarLogDistupgradeTermlog:
  --- 
  ProblemType: Bug
  ApportVersion: 2.20.9-0ubuntu7.4
  Architecture: amd64
  CurrentDesktop: XFCE
  Dependencies:
   
  DistroRelease: Ubuntu 18.04
  InstallationDate: Installed on 2016-04-03 (935 days ago)
  InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
  Package: shim 15+1533136590.3beb971-0ubuntu1
  PackageArchitecture: amd64
  ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18
  Tags:  bionic
  Uname: Linux 4.15.0-38-lowlatency x86_64
  UpgradeStatus: Upgraded to bionic on 2018-09-24 (32 days ago)
  UserGroups: adm audio cdrom dialout dip lpadmin plugdev sambashare sudo vboxusers
  _MarkForUpload: True
  --- 
  ProblemType: Bug
  .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] Datei oder Verzeichnis nicht gefunden: '/proc/sys/kernel/moksbstate_disabled'
  ApportVersion: 2.20.9-0ubuntu7.4
  Architecture: amd64
  CurrentDesktop: XFCE
  DistroRelease: Ubuntu 18.04
  EFIBootMgr:
   BootCurrent: 0001
   Timeout: 1 seconds
   BootOrder: 0001,0000
   Boot0000* Windows Boot Manager	HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\MICROSOFT\BOOT\BOOTMGFW.EFI)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}....................
   Boot0001* ubuntu	HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\UBUNTU\SHIMX64.EFI)
  EFITables:
   Okt 31 22:22:51 Zuse2016 kernel: efi: EFI v2.50 by American Megatrends
   Okt 31 22:22:51 Zuse2016 kernel: efi:  ESRT=0x8b1add98  ACPI=0x8a217000  ACPI 2.0=0x8a217000  SMBIOS=0x8b1ab000  SMBIOS 3.0=0x8b1aa000 
   Okt 31 22:22:51 Zuse2016 kernel: secureboot: Secure boot enabled
   Okt 31 22:22:51 Zuse2016 kernel: esrt: Reserving ESRT space from 0x000000008b1add98 to 0x000000008b1addd0.
  InstallationDate: Installed on 2016-04-03 (941 days ago)
  InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
  Package: shim-signed 1.37~18.04.2+15+1533136590.3beb971-0ubuntu1
  PackageArchitecture: amd64
  ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18
  SecureBoot: 6   0   0   0   1
  Tags:  bionic
  Uname: Linux 4.15.0-38-lowlatency x86_64
  UpgradeStatus: Upgraded to bionic on 2018-09-24 (37 days ago)
  UserGroups: adm audio cdrom dialout dip lpadmin plugdev sambashare sudo vboxusers
  _MarkForUpload: True

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions

More information about the foundations-bugs mailing list