Package: shim-helpers-arm64-signed Version: 1+15.4+6 Severity: important Running 'aptitude safe-upgrade' on my Bullseye/Sid/Experimental system fails:
Unpacking shim-unsigned (15.4-6) over (15.4-5) ... Preparing to unpack .../3-shim-helpers-arm64-signed_1+15.4+6_arm64.deb ... Unpacking shim-helpers-arm64-signed (1+15.4+6) over (1+15.4+5) ... Preparing to unpack .../4-shim-signed-common_1.37+15.4-6_all.deb ... Unpacking shim-signed-common (1.37+15.4-6) over (1.36+15.4-5) ... Preparing to unpack .../5-shim-signed_1.37+15.4-6_arm64.deb ... Unpacking shim-signed:arm64 (1.37+15.4-6) over (1.36+15.4-5) ... Setting up libuv1:arm64 (1.40.0-2) ... Setting up shim-signed-common (1.37+15.4-6) ... No DKMS packages installed: not changing Secure Boot validation state. Setting up udev (249-1) ... Setting up python3-urllib3 (1.26.5-1~exp1) ... Setting up shim-unsigned (15.4-6) ... Setting up shim-helpers-arm64-signed (1+15.4+6) ... Installing for arm64-efi platform. grub-install: warning: Cannot set EFI variable Boot0000. grub-install: warning: efivarfs_set_variable: failed to open /sys/firmware/efi/efivars/Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c for writing: Read-only file system. grub-install: warning: _efi_set_variable_mode: ops->set_variable() failed: Read-only file system. grub-install: error: failed to register the EFI boot entry: Read-only file system. dpkg: error processing package shim-helpers-arm64-signed (--configure): installed shim-helpers-arm64-signed package post-installation script subprocess returned error exit status 1 dpkg: dependency problems prevent configuration of shim-signed:arm64: shim-signed:arm64 depends on shim-helpers-arm64-signed (>= 1+15.4+2); however: Package shim-helpers-arm64-signed is not configured yet. dpkg: error processing package shim-signed:arm64 (--configure): dependency problems - leaving unconfigured Setting up systemd (249-1) ... Setting up systemd-timesyncd (249-1) ... Setting up systemd-sysv (249-1) ... Setting up libpam-systemd:arm64 (249-1) ... Processing triggers for initramfs-tools (0.140) ... update-initramfs: Generating /boot/initrd.img-5.10.47-rock64-00005-g0df86ccf5feb W: Possible missing firmware /lib/firmware/renesas_usb_fw.mem for built-in driver xhci_pci W: Possible missing firmware /lib/firmware/r8a779x_usb3_v3.dlmem for built-in driver xhci_plat_hcd W: Possible missing firmware /lib/firmware/r8a779x_usb3_v2.dlmem for built-in driver xhci_plat_hcd W: Possible missing firmware /lib/firmware/r8a779x_usb3_v1.dlmem for built-in driver xhci_plat_hcd W: Possible missing firmware /lib/firmware/nvidia/tegra194/xusb.bin for built-in driver xhci_tegra W: Possible missing firmware /lib/firmware/nvidia/tegra186/xusb.bin for built-in driver xhci_tegra W: Possible missing firmware /lib/firmware/nvidia/tegra210/xusb.bin for built-in driver xhci_tegra W: Possible missing firmware /lib/firmware/nvidia/tegra124/xusb.bin for built-in driver xhci_tegra I: The initramfs will attempt to resume from /dev/sda1 I: (UUID=d97f0a17-fc61-403c-92f3-af5e2a7b33f8) I: Set the RESUME variable to override this. Processing triggers for libc-bin (2.31-12) ... Processing triggers for man-db (2.9.4-2) ... Processing triggers for dbus (1.13.18-2) ... Errors were encountered while processing: shim-helpers-arm64-signed shim-signed:arm64 E: Sub-process /usr/bin/dpkg returned an error code (1) Setting up shim-helpers-arm64-signed (1+15.4+6) ... Installing for arm64-efi platform. grub-install: warning: Cannot set EFI variable Boot0000. grub-install: warning: efivarfs_set_variable: failed to open /sys/firmware/efi/efivars/Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c for writing: Read-only file system. grub-install: warning: _efi_set_variable_mode: ops->set_variable() failed: Read-only file system. grub-install: error: failed to register the EFI boot entry: Read-only file system. dpkg: error processing package shim-helpers-arm64-signed (--configure): installed shim-helpers-arm64-signed package post-installation script subprocess returned error exit status 1 dpkg: dependency problems prevent configuration of shim-signed:arm64: shim-signed:arm64 depends on shim-helpers-arm64-signed (>= 1+15.4+2); however: Package shim-helpers-arm64-signed is not configured yet. dpkg: error processing package shim-signed:arm64 (--configure): dependency problems - leaving unconfigured Errors were encountered while processing: shim-helpers-arm64-signed shim-signed:arm64 If the issue is in grub/grub-efi-arm64, feel free to reassign. I've had this problem before and at some point found a fix/workaround, but I wasn't smart enough to write that down. I know that now every aptitude safe-upgrade will give me this error :-/ $ ls -l /sys/firmware/efi/efivars/ total 0 -rw-r--r-- 1 root root 5 1 jul 23:55 AuditMode-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 124 1 jul 23:55 Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 6 1 jul 23:55 BootCurrent-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 6 1 jul 23:55 BootOrder-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 5 1 jul 23:55 DeployedMode-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 12 1 jul 23:55 OsIndicationsSupported-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 10 1 jul 23:55 PlatformLang-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 10 1 jul 23:55 PlatformLangCodes-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 5 1 jul 23:55 SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 5 1 jul 23:55 SetupMode-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 5 1 jul 23:55 VendorKeys-8be4df61-93ca-11d2-aa0d-00e098032b8c I have no idea what caused the 'Read-only file system' message. While I'm now running an upstream kernel with a few patches for the Rock64 device, I'm quite certain it happened previously with the Debian kernel, so I'll assume that would happen now too. If it's relevant at all. Cheers, Diederik -- System Information: Debian Release: 11.0 APT prefers testing APT policy: (990, 'testing'), (500, 'testing-security'), (500, 'unstable'), (101, 'experimental') Architecture: arm64 (aarch64) Kernel: Linux 5.10.47-rock64-00005-g0df86ccf5feb (SMP w/4 CPU threads; PREEMPT) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages shim-helpers-arm64-signed depends on: ii shim-unsigned 15.4-6 shim-helpers-arm64-signed recommends no packages. shim-helpers-arm64-signed suggests no packages. -- no debconf information