[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
** Description changed: Started with Ubuntu Version 14.04 I always had SecureBoot enabled and also CSM (compatibility support module) enabled in BIOS of Motherboard ASUS Z170-A, BIOS 3802 03/15/2018. On October, 13th i did the updates that UpdateManager showed in the morning. After rebooting in the evening, afterwards the BIOS splash screen there was only a black screen. No grub menu, no booting in SecureBoot mode. - I tried different repairs (tool boot-repair, reinstalling grub, installing signed kernel transitional packages and so on, but nothing would help. + I tried different repairs (tool boot-repair, reinstalling grub, installing signed kernel transitional packages and so on), but nothing would help. At the end I found out out, that switching CSM to disabled "solved" the problem and it is now reproducible: Switching CSM on, no secure boot, switching off, secure boot works. But I did not wont to switch CSM off. I also tried to get some help at ubuntuforum. But no luck. See here https://ubuntuforums.org/showthread.php?t=2404150 Since today I think it's a bug in shim or grub, because at the morning of Oct, 13th these have been updated. Regards Frank ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: ubuntu-release-upgrader-core 1:18.04.27 ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18 Uname: Linux 4.15.0-38-lowlatency x86_64 ApportVersion: 2.20.9-0ubuntu7.4 Architecture: amd64 CrashDB: ubuntu CurrentDesktop: XFCE Date: Wed Oct 24 20:36:17 2018 InstallationDate: Installed on 2016-04-03 (933 days ago) InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1) PackageArchitecture: all ProcEnviron: - LANGUAGE=de_DE - PATH=(custom, no user) - XDG_RUNTIME_DIR= - LANG=de_DE.UTF-8 - SHELL=/bin/bash + LANGUAGE=de_DE + PATH=(custom, no user) + XDG_RUNTIME_DIR= + LANG=de_DE.UTF-8 + SHELL=/bin/bash SourcePackage: ubuntu-release-upgrader Symptom: release-upgrade UpgradeStatus: Upgraded to bionic on 2018-09-24 (30 days ago) VarLogDistupgradeTermlog: - --- + --- ProblemType: Bug ApportVersion: 2.20.9-0ubuntu7.4 Architecture: amd64 CurrentDesktop: XFCE Dependencies: - + DistroRelease: Ubuntu 18.04 InstallationDate: Installed on 2016-04-03 (935 days ago) InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1) Package: shim 15+1533136590.3beb971-0ubuntu1 PackageArchitecture: amd64 ProcVersionSignature: Ubuntu 4.15.0-38.41-lowlatency 4.15.18 Tags: bionic Uname: Linux 4.15.0-38-lowlatency x86_64 UpgradeStatus: Upgraded to bionic on 2018-09-24 (32 days ago) UserGroups: adm audio cdrom dialout dip lpadmin plugdev sambashare sudo vboxusers _MarkForUpload: True - --- + --- ProblemType: Bug .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] Datei oder Verzeichnis nicht gefunden: '/proc/sys/kernel/moksbstate_disabled' ApportVersion: 2.20.9-0ubuntu7.4 Architecture: amd64 CurrentDesktop: XFCE DistroRelease: Ubuntu 18.04 EFIBootMgr: - BootCurrent: 0001 - Timeout: 1 seconds - BootOrder: 0001, - Boot* Windows Boot Manager HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\MICROSOFT\BOOT\BOOTMGFW.EFI)WINDOWS.x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}.... - Boot0001* ubuntu HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\UBUNTU\SHIMX64.EFI) + BootCurrent: 0001 + Timeout: 1 seconds + BootOrder: 0001, + Boot* Windows Boot Manager HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\MICROSOFT\BOOT\BOOTMGFW.EFI)WINDOWS.x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}.... + Boot0001* ubuntu HD(2,GPT,ae4c669f-cdb2-4172-8148-b15621f6b33c,0xe1800,0x32000)/File(\EFI\UBUNTU\SHIMX64.EFI) EFITables: - Okt 31 22:22:51 Zuse2016 kernel: efi: EFI v2.50 by American Megatrends - Okt 31 22:22:51 Zuse2016 kernel: efi: ESRT=0x8b1add98 ACPI=0x8a217000 ACPI 2.0=0x8a217000 SMBIOS=0x8b1ab000 SMBIOS 3.0=0x8b1aa000 - Okt 31 22:22:51 Zuse2016 kernel: secureboot: Secure boot enabled - Okt 31 22:22:51 Zuse2016 kernel: esrt: Reserving ESRT space from 0x8b1add98 to 0x8b1addd0. + Okt 31 22:22:51 Zuse2016 kernel: efi: EFI v2.50 by American Megatrends + Okt 31 22:22:51 Zuse2016 kernel: efi: ESRT=0x8b1add98 ACPI=0x8a217000 ACPI 2.0=0x8a217000 SMBIOS=0x8b1ab000 SMBIOS 3.0=0x8b1aa000 + Okt 31 22:22:51 Zuse2016 kernel: secureboot: Secure boot enabled + Okt 31 22:22:51 Zuse2016 kernel: esrt: Reserving ESRT space from 0x8b1add98 to 0x8b1addd0. InstallationDate: Installed on 2016-04-03 (941 days ago) InstallationMedia: Ubuntu-Studio 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1) Package: shim-sig
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
** Changed in: shim-signed (Ubuntu) Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox) ** Changed in: shim-signed (Ubuntu Bionic) Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
** Summary changed: - grub menu not showing with SecureBoot enabled after update + ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update ** Changed in: shim-signed (Ubuntu) Importance: Undecided => High ** Changed in: shim-signed (Ubuntu Bionic) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
Advice from @cyphermox is to actually record the screen rather than taking a picture, in case the messages appear/disappear quickly. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
Could you please test the following: - boot with CSM disabled - run sudo mokutil --set-verbosity true - reboot to the firmware and enable CSM - boot Ubuntu - report here any messages that appear on the console at boot time (take a picture and upload, or transcribe, etc) After this, you can run 'sudo mokutil --set-verbosity false' to restore the previous behavior. ** Changed in: shim-signed (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
** Tags added: id-5bdcb11d1c08c065251b2a5c -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
Oh my god, that is really a strange behavin. As you said, I entered that mokutil command and rebooted the system, entered BIOS. I enabled CSM, saved the config and rebooted. In the attachment you see the message from shim after BIOS splash screen. But what happened then? Suddenly I saw the grub menu and after 10 secs ubuntu starts automagically in secure boot mode. I didn't believe that. Thought I had made a mistake. So I switched off verbosity and rebooted. But, and that's surprising, I did not saw any grub menu, just the black screen as before. So I had to boot into BIOS, set CSM to "auto" and reboot. And I did it again, just to verify this. I switched verbosity on, rebooted, enabled CSM, rebooted again and I have seen the grub menu. Ubuntu starts automagically in secure boot mode. Conclusion: CSM enabled and mokutil verbosity true-> grub menu and SecureBoot CSM enabled and mokutil verbosity false-> Black screen Further info: Yesterday I run an update that has been listed in update manager. Here you see the apt history: Start-Date: 2018-11-02 21:20:21 Commandline: aptdaemon role='role-commit-packages' sender=':1.73' Upgrade: libparted2:amd64 (3.2-20, 3.2-20ubuntu0.1), libparted-fs-resize0:amd64 (3.2-20, 3.2-20ubuntu0.1), parted:amd64 (3.2-20, 3.2-20ubuntu0.1), mokutil:amd64 (0.3.0-0ubuntu5, 0.3.0+1538710437.fb6250f-0ubuntu2~18.04.1), secureboot-db:amd64 (1.1, 1.4~ubuntu0.18.04.1) End-Date: 2018-11-02 21:20:29 So what about updates at the moment. Is it ok for you if I still run these updates or should I wait with this. You know, I always want to install security patches. ** Attachment added: "shim message with mokutil verbosity true" https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+attachment/5208857/+files/Bildschirmfoto_2018-11-03_19-45-04.png -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
** Changed in: shim-signed (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1799767] Re: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update
** Tags added: fr-575 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1799767 Title: ASUS Z170-A, shim 15+1533136590.3beb971-0ubuntu1: grub menu not showing with both SecureBoot and CSM enabled after update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1799767/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs