[Bug 1845289] Re: Grub EFI amd64 no longer start EFI/Microsoft/Boot/bootmgfw.efi

[Launchpad Bug Tracker]

This bug was fixed in the package grub2 - 2.04-1ubuntu12.1

---------------
grub2 (2.04-1ubuntu12.1) eoan; urgency=medium

  * debian/patches/ubuntu-tpm-unknown-error-non-fatal.patch: treat "unknown"
    TPM errors as non-fatal, but still write up the details as debug messages
    so we can further track what happens with the systems throwing those up.
    (LP: #1848892)
  * debian/patches/ubuntu-linuxefi.patch: Drop extra check for Secure Boot
    status in linuxefi_secure_validate(); it's unnecessary and blocking boot
    in chainload (like chainloading Windows) when SB is disabled.
    (LP: #1845289)

 -- Mathieu Trudel-Lapierre <cyphermox at ubuntu.com>  Fri, 01 Nov 2019
15:16:43 -0400

** Changed in: grub2 (Ubuntu Eoan)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1845289

Title:
  Grub EFI amd64 no longer start EFI/Microsoft/Boot/bootmgfw.efi

Status in grub2 package in Ubuntu:
  Fix Released
Status in grub2 source package in Eoan:
  Fix Released

Bug description:
  [Impact]
  Dual-boot users who have somehow had shim uninstalled from their system / Secure Boot disabled.

  [Test case]
  (system with dual-boot setup for Ubuntu and Windows)
  1) uninstall shim/shim-signed from the system
  2) Run 'sudo grub-install -v'; ensure grubx64.efi is installed as the ubuntu bootentry (check 'sudo efibootmgr -v')
  3) Reboot.
  4) In system firmware, ensure Secure Boot is disabled.
  5) Attempt to start Windows from the Grub menu.

  Verify that Windows is chainloaded from Grub successfully; without
  returning to the GRUB menu or restarting the whole system.

  [Regression potential]
  Minimal; this is returning the state of the code paths for linuxefi validation back to how they were in GRUB 2.02; the extra check for the Secure Boot state is unnecessary at that point since it will be run again later when validating the images. This affects all validation code paths on UEFI but the net effect of reverting that change should be nil due to the duplication of code that already exists.

  ---

  On a dual boot computer with Windows 10 Pro and Ubuntu 19.10, since a
  month, Grub was unable to boot Windows 10. Hitting the Windows entry
  line give me a 0.1s black screen and get me back to Grub Menu.

  sudo update-grub give me :

  Sourcing file `/etc/default/grub'
  Sourcing file `/etc/default/grub.d/init-select.cfg'
  Generating grub configuration file ...
  Found linux image: /boot/vmlinuz-5.3.0-10-generic
  Found initrd image: /boot/initrd.img-5.3.0-10-generic
  Found Windows Boot Manager on /dev/sda1@/EFI/Microsoft/Boot/bootmgfw.efi
  Adding boot menu entry for EFI firmware configuration
  done

  ProblemType: Bug
  DistroRelease: Ubuntu 19.10
  Package: grub-efi-amd64 2.04-1ubuntu5
  ProcVersionSignature: Ubuntu 5.3.0-10.11-generic 5.3.0-rc8
  Uname: Linux 5.3.0-10-generic x86_64
  ApportVersion: 2.20.11-0ubuntu7
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Wed Sep 25 08:01:05 2019
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=fr_FR.UTF-8
   SHELL=/bin/bash
  SourcePackage: grub2
  UpgradeStatus: Upgraded to eoan on 2018-11-14 (314 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1845289/+subscriptions