[Bug 1928434] Re: shim-signed does not boot on EFI 2.40 by Apple

[Steve Langasek]

On Mon, May 17, 2021 at 03:23:45PM -0000, Dimitri John Ledkov wrote:
> See
> https://github.com/lcp/mokutil/commit/03bb7af4a84c39f2417fd14ef20b11b2e8d1ad51

> Is this something you can compile yourself, or do you need me to provide
> you with an updated mokutil package?

I have provided a mokutil package with the fix here:

  https://launchpad.net/~vorlon/+archive/ubuntu/ppa

Please install it by running:

  sudo add-apt-repository ppa:vorlon/ppa
  sudo apt install mokutil

and then 'sudo mokutil --set-verbosity true' should work.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1928434

Title:
  shim-signed does not boot on EFI 2.40 by Apple

Status in shim package in Ubuntu:
  Triaged
Status in shim-signed package in Ubuntu:
  Incomplete

Bug description:
  Hi,

  I have a MacBookPro14,3. After upgrade to Ubuntu 21.04 it failed to boot.
  At first I thought I'm affected by https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1925010.

  But my MacBook has newer efi Version and the fixed version of shim-
  signed is not solving my issues.

  >sudo dmesg | grep EFI
  [    0.000000] efi: EFI v2.40 by Apple
  [    0.011978] ACPI: UEFI 0x000000007AF7D000 000042 (v01 INTEL  EDK2     00000002      01000013)
  [    0.012029] ACPI: Reserving UEFI table memory at [mem 0x7af7d000-0x7af7d041]
  [    0.411423] fb0: EFI VGA frame buffer device
  [    0.418914] EFI Variables Facility v0.08 2004-May-17
  [    2.696996] fb0: switching to amdgpudrmfb from EFI VGA

  I reinstalled Ubuntu 21.04 from scratch and updated all packages during installation.
  The reboot failed. I hear the apple start sound and then an endless repeating echo.
  I've chrooted inside my system and verified that shim-signed 1.47+15.4-0ubuntu2 is installed.

  The suggested workaround from the other bug works (I can normally boot afterwards):
  /boot/efi/EFI# cp -b ubuntu/grubx64.efi ubuntu/shimx64.efi
  /boot/efi/EFI# cp -b ubuntu/grubx64.efi BOOT/BOOTX64.EFI

  "sudo apt reinstall shim-signed" reliable breaks my macbook again.

  Is there anything I can do to help solving this issue? What do you
  need?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1928434/+subscriptions