grub-efi-amd64 2.02-2ubuntu8.10 failed to install/upgrade: grub-check-signatures: 50: /usr/share/grub/grub-check-signatures: mokutil: not found

Bug #1814187 reported by Leonardo Müller
42
This bug affects 9 people
Affects Status Importance Assigned to Milestone
grub2 (Ubuntu)
Triaged
Medium
Unassigned
Bionic
New
Undecided
Unassigned
Focal
New
Undecided
Unassigned
Jammy
New
Undecided
Unassigned

Bug Description

I used sudo apt update and sudo apt upgrade. 45 packages updated, 7 new installed (kernel). All kernels installed are from Ubuntu repositories, the system was upgraded a few times already. The kernels the system have:

4.15.0-45-generic
4.15.0-44-generic
4.15.0-43-generic
4.15.0-22-generic
4.10.0-26-generic
4.4.0-83-generic

Error message:

Configuring grub-efi-amd64 (2.02-2ubuntu8.10) ...
/usr/share/grub/grub-check-signatures: 50: /usr/share/grub/grub-check-signatures: mokutil: not found

[Workaround]

Install mokutil: sudo apt install mokutil

ProblemType: Package
DistroRelease: Ubuntu 18.04
Package: grub-efi-amd64 2.02-2ubuntu8.10
ProcVersionSignature: Ubuntu 4.18.0-14.15~18.04.1-generic 4.18.20
Uname: Linux 4.18.0-14-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.5
Architecture: amd64
Date: Thu Jan 31 21:53:58 2019
ErrorMessage: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 127
InstallationDate: Installed on 2017-07-24 (556 days ago)
InstallationMedia: Xubuntu 17.04 "Zesty Zapus" - Release amd64 (20170412)
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.18.0-14-generic root=UUID=984701f6-117a-4fb5-ba8e-761744701fff ro quiet
Python3Details: /usr/bin/python3.6, Python 3.6.7, python3-minimal, 3.6.7-1~18.04
PythonDetails: /usr/bin/python2.7, Python 2.7.15rc1, python-minimal, 2.7.15~rc1-1
RelatedPackageVersions:
 dpkg 1.19.0.5ubuntu2.1
 apt 1.6.8
SourcePackage: grub2
Title: package grub-efi-amd64 2.02-2ubuntu8.10 failed to install/upgrade: installed grub-efi-amd64 package post-installation script subprocess returned error exit status 127
UpgradeStatus: Upgraded to bionic on 2018-04-27 (279 days ago)

Revision history for this message
Leonardo Müller (leozinho29-eu) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in grub2 (Ubuntu):
status: New → Confirmed
Revision history for this message
Arnd Behring (arndbehring) wrote :

I've also encountered this problem while installing updates on Ubuntu 18.04.2.

Digging a bit into into the postinst script I've discovered that the failure for me came from the script /usr/share/grub/grub-check-signatures (from the grub-common package). There, mokutil is called which fails for me since the mokutil package isn't installed. I think this is a missing dependency of the grub-common package. After installing mokutil, the errors about dpkg --configure configure failing vanished and for me the packages grub-efi-amd64, grub-efi-amd64-signed and grub-efi packages were successfully configured.

Revision history for this message
Braedon Vickers (braedon-vickers) wrote :

I had the same issue, and installing mokutil fixes it for me too. Thanks @arndbehring!

Revision history for this message
Mtt.Castelli (mtt.castelli) wrote :

This this bug still stands upgrading to #groovy Gorilla the next 20.10 release, thanks @arndbehring, it's all in his fix.

#
# apt install mokutil

Revision history for this message
Claudio Desideri (happy-snizzo) wrote :

Encountered today, fixed by installing mokutil. Package failing was grub-efi-amd64-signed. Maybe mokutil should be added as a dependency.

Benjamin Drung (bdrung)
description: updated
summary: - package grub-efi-amd64 2.02-2ubuntu8.10 failed to install/upgrade:
- installed grub-efi-amd64 package post-installation script subprocess
- returned error exit status 127
+ grub-efi-amd64 2.02-2ubuntu8.10 failed to install/upgrade: grub-check-
+ signatures: 50: /usr/share/grub/grub-check-signatures: mokutil: not
+ found
Revision history for this message
Benjamin Drung (bdrung) wrote :

/usr/share/grub/grub-check-signatures is shipped by grub-common and the code is called when on_secure_boot is true. So grub-common should depend on mokutil.

Changed in grub2 (Ubuntu):
status: Confirmed → Triaged
importance: Undecided → Medium
tags: added: foundations-triage-discuss
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.