[Bug 1871969] Re: Ubuntu booting takes a long time when secure boot is enabled

[Steve Langasek]

SecureBoot is widely used on Ubuntu across a substantial range of
hardware, and no one else is reporting that SecureBoot being enabled
causes the machine "to boot twice".  What exactly are you seeing?

And from the information attached to your bug report:

> GrubDiff: Binary files /boot/efi/EFI/ubuntu/grubx64.efi and
/usr/lib/grub/x86_64-efi-signed/grubx64.efi.signed differ

Why does the grubx64.efi in your ESP not match the one provided by the
grub-efi-amd64-signed package that you have installed?

** Changed in: shim (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1871969

Title:
  Ubuntu booting takes a long time when secure boot is enabled

Status in shim package in Ubuntu:
  Incomplete

Bug description:
  The Linux kernel has issues when secure boot is enabled and PTT
  enabled.

  For starters, it causes the machine to boot twice every time I
  restart. In addition, the kernel and OS is just slow. This only
  happened after installing Ubuntu with secure boot enabled, and MOK
  manager on.

  The machine should boot once, load the signed modules and kernel
  stuff, and load Ubuntu without issue.

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: shim 15+1533136590.3beb971-0ubuntu1
  ProcVersionSignature: Ubuntu 5.3.0-46.38~18.04.1-generic 5.3.18
  Uname: Linux 5.3.0-46-generic x86_64
  .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled'
  ApportVersion: 2.20.9-0ubuntu7.14
  Architecture: amd64
  Date: Thu Apr  9 20:13:07 2020
  Dependencies:
   
  EFIBootMgr:
   BootCurrent: 0000
   Timeout: 0 seconds
   BootOrder: 0000,0002
   Boot0000* ubuntu	HD(1,GPT,852024ca-15db-4ab7-9c49-0494d8af08e0,0x800,0x100000)/File(\EFI\ubuntu\shimx64.efi)
   Boot0002* UEFI: ST1000LM035-1RK172, Partition 1	HD(1,GPT,852024ca-15db-4ab7-9c49-0494d8af08e0,0x800,0x100000)/File(EFI\boot\bootx64.efi)..BO
  EFITables:
   Apr 09 19:55:28 ubuntuPC kernel: efi: EFI v2.40 by American Megatrends
   Apr 09 19:55:28 ubuntuPC kernel: efi:  ACPI=0x8a5f1000  ACPI 2.0=0x8a5f1000  SMBIOS=0xf0000  SMBIOS 3.0=0xf0020  ESRT=0x8b2a8118  MEMATTR=0x86f14018 
   Apr 09 19:55:28 ubuntuPC kernel: secureboot: Secure boot disabled
   Apr 09 19:55:28 ubuntuPC kernel: esrt: Reserving ESRT space from 0x000000008b2a8118 to 0x000000008b2a8150.
  GrubDiff: Binary files /boot/efi/EFI/ubuntu/grubx64.efi and /usr/lib/grub/x86_64-efi-signed/grubx64.efi.signed differ
  InstallationDate: Installed on 2020-04-04 (5 days ago)
  InstallationMedia: Ubuntu 18.04.4 LTS "Bionic Beaver" - Release amd64 (20200203.1)
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SecureBoot: 6   0   0   0   1
  SourcePackage: shim
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1871969/+subscriptions