[Bug 1934780] Re: shim crashes on Mellanox BF1 SmartNIC

[Launchpad Bug Tracker]

This bug was fixed in the package shim-signed - 1.37~18.04.10

---------------
shim-signed (1.37~18.04.10) bionic; urgency=medium

  * Remove unnecessary efitools dependency that prevented build on arm64

shim-signed (1.37~18.04.9) bionic; urgency=medium

  * New upstream release 15.4.  LP: #1921134
  * Synchronize packaging with 1.50, summary
    - Update packaging to pull fb and mm from shim-signed package as in
      later releases, dropping the runtime dependency on shim.
    - Add download-signed script from linux-signed package
    - Include reworked Makefile from devel to better assert the integrity of
      the executables.
    - Dual-signed shim
    - Set XB-Important: yes on shim-signed package so that it cannot be
      removed by accident (LP: #1898729)
    - download-signed: Fetch signed artefacts from versioned URL instead
      of current/ symlink to work around caching (LP: #1936640)
  * Update to shim 15.4-0ubuntu5:
    - Stop addending vendor dbx to MokListXRT during MokListX mirroring. This
      is causing systems to run out of EFI storage space, or just hang up
      when trying to write it (LP: #1924605) (LP: #1928434)
    - Further relax the check for variable mirroring on non-secureboot systems
      avoiding boot failures on out of space conditons (pull request #372)
    - Don't unhook ExitBootServices() when EBS protection is disabled
      (LP: #1931136) (pull request #378)
  * Update to shim 15.4-0ubuntu7:
    - Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379)
    - Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383)
    - Fix accidental deletion of RT variables (LP: #1934506) (PR #387)
    - mok: relax the maximum variable size check (LP: #1934780) (PR #369)

 -- Julian Andres Klode <juliank at ubuntu.com>  Mon, 19 Jul 2021 17:01:19
+0200

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1934780

Title:
  shim crashes on Mellanox BF1 SmartNIC

Status in shim package in Ubuntu:
  Fix Released
Status in shim-signed package in Ubuntu:
  Fix Released
Status in shim source package in Xenial:
  Fix Released
Status in shim-signed source package in Xenial:
  Fix Released
Status in shim source package in Bionic:
  Fix Released
Status in shim-signed source package in Bionic:
  Fix Released
Status in shim source package in Focal:
  Fix Released
Status in shim-signed source package in Focal:
  Fix Released
Status in shim source package in Hirsute:
  Fix Released

Bug description:
  [Impact]
  Systems that do not support QueryVariableInfo() EFI function fail to boot.

  [Test plan]
  Would be good to get this checked on the Mellanox BF1 SmartNIC on one release (shim is binary copied)

  [Where problems could occur]
  it might still fail to mirror variables on those platforms. Code looks like the variable could be uninitialized on error case, but it's actually set inside the call to 0 so that's good.

  [Original bug report]

  shim in focal-proposed (shim-signed 1.40.5) is crashing on Mellanox
  BF1 SmartNIC, showing this trace:

  >>Start PXE over IPv4.
    Station IP address is 192.168.100.2

    Server IP address is 192.168.100.1
    NBP filename is shimaa64.efi.signed
    NBP filesize is 840024 Bytes
   Downloading NBP file...

    NBP file downloaded successfully.
  Could not get variable storage info: Unsupported
  Could not create MokListRT: Unsupported
  Could not get variable storage info: Unsupported
  Could not create MokListXRT: Unsupported
  Could not get variable storage info: Unsupported
  Could not create MokListRT: Unsupported
  Could not get variable storage info: Unsupported
  Could not create MokListXRT: Unsupported
  Something has gone seriously wrong: import_mok_state() failed: Unsupported
  ERROR:   System Off: operation not handled.
  PANIC at PC : 0x000000000045c488

  Some EFI related kernel output:

  [    0.000000] efi: EFI v2.70 by EDK II
  [    0.000000] efi:  SMBIOS=0xfafb0000  SMBIOS 3.0=0xf5b70000  ACPI=0xf5c10000  ACPI 2.0=0xf5c10014  MEMATTR=0xf769e018  ESRT=0xf7593098  MEMRESERVE=0xf49e9018
  [    0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
  [    0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz console=hvc0 console=ttyAMA0 earlycon=pl011,0x01000000 fixrtc ip=:::::tmfifo_net0:dhcp url=http://192.168.100.1/tftp/bluefield.iso cloud-config-url=/dev/null nopersistent
  [    0.085871] Remapping and enabling EFI services.
  [    0.377821] DMI: https://www.mellanox.com BlueField SoC/BlueField SoC, BIOS BlueField:3.6.0-24-gd4db9c4 Apr  6 2021
  [    1.028977] Registered efivars operations
  [    2.481241] rtc-efi rtc-efi: registered as rtc0
  [    2.593647] EFI Variables Facility v0.08 2004-May-17

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1934780/+subscriptions