[Bug 1925010] Re: shim-signed 15.4 does not boot on EFI 1.10 systems

[Balint Reczey]

Verified 1.47+15.4-0ubuntu2 on Hirsute on the MacBook Air (MBA 5,2) I
have first observed the problem:

rbalint at chaos:~$ sudo apt install shim-signed
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages will be upgraded:
  shim-signed
1 upgraded, 0 newly installed, 0 to remove and 17 not upgraded.
Need to get 447 kB of archives.
After this operation, 1.024 B of additional disk space will be used.
Get:1 http://hu.archive.ubuntu.com/ubuntu hirsute-proposed/main amd64 shim-signed amd64 1.47+15.4-0ubuntu2 [447 kB]
Fetched 447 kB in 0s (2.059 kB/s)   
Preconfiguring packages ...
(Reading database ... 321160 files and directories currently installed.)
Preparing to unpack .../shim-signed_1.47+15.4-0ubuntu2_amd64.deb ...
Unpacking shim-signed (1.47+15.4-0ubuntu2) over (1.46+15.4-0ubuntu1) ...
Setting up shim-signed (1.47+15.4-0ubuntu2) ...
Installing grub to /boot/efi.
Installing for x86_64-efi platform.
Installation finished. No error reported.
Scanning processes...                                                                                                                                                         
Scanning processor microcode...                                                                                                                                               
Scanning linux images...                                                                                                                                                      

Running kernel seems to be up-to-date.

The processor microcode seems to be up-to-date.

No services need to be restarted.

No containers need to be restarted.

No user sessions are running outdated binaries.

rbalint at chaos:~$ Shared connection to chaos-w closed.
$ ssh chaos

rbalint at chaos:~$ sudo ls -alhR /boot/efi/EFI/
/boot/efi/EFI/:
total 16K
drwx------ 4 root root 4,0K jan   18  2018 .
drwx------ 3 root root 4,0K jan    1  1970 ..
drwx------ 2 root root 4,0K febr   4  2019 BOOT
drwx------ 3 root root 4,0K febr   7  2020 ubuntu

/boot/efi/EFI/BOOT:
total 1,9M
drwx------ 2 root root 4,0K febr   4  2019 .
drwx------ 4 root root 4,0K jan   18  2018 ..
-rwx------ 1 root root 933K máj   10 18:24 BOOTX64.EFI
-rwx------ 1 root root  84K máj   10 18:24 fbx64.efi
-rwx------ 1 root root 837K máj   10 18:24 mmx64.efi

/boot/efi/EFI/ubuntu:
total 3,5M
drwx------ 3 root root 4,0K febr   7  2020 .
drwx------ 4 root root 4,0K jan   18  2018 ..
-rwx------ 1 root root  108 máj   10 18:24 BOOTX64.CSV
-rwx------ 1 root root  82K ápr   19 16:33 fbx64.efi
drwx------ 2 root root 4,0K jún    3  2017 fw
-rwx------ 1 root root  126 máj   10 18:24 grub.cfg
-rwx------ 1 root root 1,7M máj   10 18:24 grubx64.efi
-rwx------ 1 root root 837K máj   10 18:24 mmx64.efi
-rwx------ 1 root root 933K máj   10 18:24 shimx64.efi

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1925010

Title:
  shim-signed 15.4 does not boot on EFI 1.10 systems

Status in shim package in Ubuntu:
  Fix Released
Status in shim-signed package in Ubuntu:
  Fix Released
Status in shim source package in Hirsute:
  Fix Committed
Status in shim-signed source package in Hirsute:
  Fix Committed

Bug description:
  The latest update on Hirsute made the MacBook Air from 2012
  unbootable.

  It could be recovered by booting a 20.04 live CD, downloading 20.04's
  shim package and overwriting the files in EFI/ubuntu and EFI/BOOT with
  the files shipped in the shim package.

  Machines Affected (not comprehensive):
  MacBookPro8,2
  MacBookAir5,2

  [Test case]
  For a system that has applied the workaround from https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1925010/comments/14 and is bootable:

  - install shim-signed from hirsute-proposed
  - reboot
  - verify that the system now boots without workaround

  This test case applies only to hirsute.  For all other series, there
  has been no regression, and because this is the same binary across all
  series, no other SRU testing is required.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1925010/+subscriptions