Ubuntu
grub2 package

(grub2 doesn't boot unverified kernel under UEFI, SB state unknown) package shim-signed 1.28+0.9+1474479173.6c180c6-1ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

Bug #1695065 reported by Gary Budd on 2017-06-01

90

This bug affects 15 people

Affects		Status	Importance	Assigned to	Milestone
	grub2 (Ubuntu)	Fix Released	High	Mathieu Trudel-Lapierre
	Trusty	Triaged	High	Mathieu Trudel-Lapierre
	Xenial	Triaged	High	Mathieu Trudel-Lapierre	Ubuntu ubuntu-16.04.3
	Yakkety	Confirmed	Undecided	Unassigned
	Zesty	Confirmed	Undecided	Unassigned
	Artful	Fix Released	High	Mathieu Trudel-Lapierre

Bug Description

the program error form just popped up without any apparant reason

ProblemType: Package
DistroRelease: Ubuntu 17.04
Package: shim-signed 1.28+0.9+1474479173.6c180c6-1ubuntu1
ProcVersionSignature: Ubuntu 4.10.0-21.23-generic 4.10.11
Uname: Linux 4.10.0-21-generic x86_64
NonfreeKernelModules: nvidia_uvm nvidia_drm nvidia_modeset nvidia
.proc.sys.kernel.moksbstate_disabled: 0
.sys.firmware.efi.efivars.MokSBStateRT-605dab50-e046-4300-abb6-3dd810dd8b23:

Tags:

Revision history for this message

Gary Budd (gkbudd) wrote on 2017-06-01:

#1

AptOrdering.txt Edit (719 bytes, text/plain; charset="utf-8")
BootEFIContents.txt Edit (67 bytes, text/plain; charset="utf-8")
Dependencies.txt Edit (2.7 KiB, text/plain; charset="utf-8")
Df.txt Edit (626 bytes, text/plain; charset="utf-8")
Dmesg.txt Edit (59.9 KiB, text/plain; charset="utf-8")
DpkgHistoryLog.txt Edit (1.6 KiB, text/plain; charset="utf-8")
DpkgTerminalLog.txt Edit (8.2 KiB, text/plain; charset="utf-8")
EFIBootMgr.txt Edit (665 bytes, text/plain; charset="utf-8")
JournalErrors.txt Edit (31.8 KiB, text/plain; charset="utf-8")
ProcCpuinfoMinimal.txt Edit (1014 bytes, text/plain; charset="utf-8")

Apport retracing service (apport) on 2017-06-01

tags:

removed: need-duplicate-check

Revision history for this message

Steve Langasek (vorlon) wrote on 2017-06-01: Re: (unattended-upgrade, already-installed dkms modules) package shim-signed 1.28+0.9+1474479173.6c180c6-1ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

#2

Thank you for reporting this bug. Your report shows that you had an unattended upgrade that ran and upgraded the version of the nvidia dkms module that you have installed; and that this triggered a request from shim to disable SecureBoot on your system, because dkms modules are incompatible with SecureBoot currently.

Do you remember being prompted previously about turning off SecureBoot? Did you elect not to turn off SecureBoot? Or, did you choose the option to disable SecureBoot, but not confirm this selection on reboot?

This may be the same as bug #1694986.

summary:	- package shim-signed 1.28+0.9+1474479173.6c180c6-1ubuntu1 failed to - install/upgrade: subprocess installed post-installation script returned - error exit status 1 + (unattended-upgrade, already-installed dkms modules) package shim-signed + 1.28+0.9+1474479173.6c180c6-1ubuntu1 failed to install/upgrade: + subprocess installed post-installation script returned error exit status + 1
Changed in shim-signed (Ubuntu):
assignee:	nobody → Mathieu Trudel-Lapierre (cyphermox)
importance:	Undecided → High

Revision history for this message

Launchpad Janitor (janitor) wrote on 2017-06-02:

#3

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in shim-signed (Ubuntu):
status:	New → Confirmed

Revision history for this message

Steve Langasek (vorlon) wrote on 2017-06-03:

#4

I understand this was an issue with how grub2 was booting unsigned kernels which has been resolved with grub2 2.02~beta3-4ubuntu4 in artful.

affects:	shim-signed (Ubuntu) → grub2 (Ubuntu)
Changed in grub2 (Ubuntu):
status:	Confirmed → Fix Released

Steve Langasek (vorlon) on 2017-06-03

Changed in grub2 (Ubuntu Trusty):
status:	New → Triaged
Changed in grub2 (Ubuntu Xenial):
status:	New → Triaged
Changed in grub2 (Ubuntu Trusty):
importance:	Undecided → High
Changed in grub2 (Ubuntu Xenial):
importance:	Undecided → High
Changed in grub2 (Ubuntu Trusty):
assignee:	nobody → Mathieu Trudel-Lapierre (cyphermox)
Changed in grub2 (Ubuntu Xenial):
assignee:	nobody → Mathieu Trudel-Lapierre (cyphermox)
milestone:	none → ubuntu-16.04.3

Revision history for this message

Launchpad Janitor (janitor) wrote on 2017-06-03:

#5

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in grub2 (Ubuntu Yakkety):
status:	New → Confirmed
Changed in grub2 (Ubuntu Zesty):
status:	New → Confirmed

Steve Langasek (vorlon) on 2017-06-03

summary:

- (unattended-upgrade, already-installed dkms modules) package shim-signed
- 1.28+0.9+1474479173.6c180c6-1ubuntu1 failed to install/upgrade:
- subprocess installed post-installation script returned error exit status
- 1
+ (grub2 doesn't boot unverified kernel under UEFI, SB state unknown)
+ package shim-signed 1.28+0.9+1474479173.6c180c6-1ubuntu1 failed to
+ install/upgrade: subprocess installed post-installation script returned
+ error exit status 1

Report a bug

This report contains Public information

Everyone can see this information.

Duplicates of this bug

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.