[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
Disabling PPT also works around the issue for me on my Dell laptop. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
REF: Blank Screen after upgrading grub: I confirm that my problem solved by disabling PPT in Dell Bios -> Security settings tab. (https://askubuntu.com/a/1229927/597140) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
I have a bootable Ubuntu 20.04 LTS USB disk however I am unable to boot from it to install Ubuntu due to this bug, the screen remains blank after I click Enter on the Grub page to boot. Any workarounds? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
This also broke my Dell Inspiron 7567, running Ubuntu 19.10 and the default kernel from the repos for 5.3.0-46-generic. Based on some other workarounds listed, I tried switching to PARTUUID but that still doesn't work. They system just hangs after 'Loading initial ramdisk ...' I have secure boot disabled. The only kernel on my system that boots with this package is an old `4.13.0-45-generic` one, from there I can re-install the older grub package and get the system booting again on the new kernel. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
@Mos you should not put grub on hold, but fix your kernels to set CONFIG_EFI_STUB=y -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
2.04-1ubuntu12.2 also broke ubuntu on my dell inspiron 7567 laptop I had to reinstall ubuntu due to this package upgrade, and have currently blocked grub* package updates until this new issue caused by the bugfix is resolved. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
2.04-1ubuntu12.2 broke boot on my machine. It doesn't work with kernels that don't have CONFIG_EFI_STUB=y configured. This really needs to fall back to the old mode if EFI handover is not supported by the kernel. Also, after using a kernel with CONFIG_EFI_STUB=y it still failed to boot one of my machines with root specified by UUID. I was able to workaround it by manually specifying the boot device with /dev/nvme0n1p2 at the grub menu, and then specifying GRUB_DISABLE_LINUX_UUID=true in /etc/default/grub. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
This bug was fixed in the package grub2 - 2.02-2ubuntu8.15 --- grub2 (2.02-2ubuntu8.15) bionic; urgency=medium * Make the linux command in EFI grub always try EFI handover; thanks to Chris Coulson for the patches (LP: #1864533) -- Julian Andres Klode Wed, 11 Mar 2020 21:57:49 +0100 ** Changed in: grub2 (Ubuntu Bionic) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
This bug was fixed in the package grub2 - 2.04-1ubuntu12.2 --- grub2 (2.04-1ubuntu12.2) eoan; urgency=medium * Make the linux command in EFI grub always try EFI handover; thanks to Chris Coulson for the patches (LP: #1864533) -- Julian Andres Klode Thu, 12 Mar 2020 17:40:25 +0100 ** Changed in: grub2 (Ubuntu Eoan) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
same for eoan, ubuntu12.1 -> ubuntu12.2 type/version before: 114/2 and 6/38 type/version after: 6/38 and 6/38 before, enabled: "Secure boot enabled" before, disabled: "Secure boot could not be determined (mode 0)" after, disabled: "Secure boot disabled" after, enabled: "Secure boot enabled" ** Tags removed: verification-needed verification-needed-eoan ** Tags added: verification-done verification-done-eoan -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
to 8.15 of course ... ** Tags removed: verification-needed-bionic ** Tags added: verification-done-bionic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
bionic: I upgraded from ubuntu8.14 to ubuntu8.14. type/version before: 114/2 and 6/38 type/version after: 6/38 and 6/38 Looking at dmesg: before, enabled: "Secure boot enabled" before, disabled: "Secure boot could not be determined (mode 0)" after, enabled: "Secure boot enabled" after, disabled: "Secure boot disabled" So apparently we booted via EFI stub :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Tags added: id-5e6a862ec339fd8702484ff4 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
This bug was fixed in the package grub2 - 2.04-1ubuntu22 --- grub2 (2.04-1ubuntu22) focal; urgency=medium * smbios: Add a --linux argument to apply linux modalias-like filtering * Make the linux command in EFI grub always try EFI handover; thanks to Chris Coulson for the patches (LP: #1864533) -- Julian Andres Klode Wed, 11 Mar 2020 17:46:35 +0100 ** Changed in: grub2 (Ubuntu Focal) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Tags added: id-5e5426bcb01c166f228a5923 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
Hello Steve, or anyone else affected, Accepted grub2 into eoan-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2/2.04-1ubuntu12.2 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- eoan to verification-done-eoan. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-eoan. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Also affects: grub2 (Ubuntu Eoan) Importance: Undecided Status: New ** Changed in: grub2 (Ubuntu Eoan) Importance: Undecided => Medium ** Changed in: grub2 (Ubuntu Eoan) Status: New => Fix Committed ** Tags added: verification-needed verification-needed-eoan -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Description changed:
[SRU Justification]
Currently, the Ubuntu patches for secureboot support will boot the kernel via
the EFI stub ONLY if secureboot is enabled. This means that if secureboot is
disabled, grub wrongly skips the kernel's EFI stub, resulting in buggy behavior
(missing EFI fixups; lack of access to the TCG log).
When booted on EFI, grub should ALWAYS use the EFI protocol to boot the
kernel, and only do a non-EFI boot as a fallback if the EFI stub is not
available AND secureboot is not enabled.
Patches available at https://people.canonical.com/~chrisccoulson/grub-
efi-fixes/
+ [Test case]
+ Boot kernel in secure boot and non-secure boot, check that
+ /proc/sys/kernel/bootloader_{type,version} are the same (they'd be different
if we booted via grub's own linux loader).
+
+
[Regression potential]
This changes behavior of how grub passes control to Linux kernels when
secureboot is disabled on UEFI systems, which can result in arbitrary changes
to the boot process up to and including failure to boot if there are bugs in
the kernel EFI stub on some platforms. However, it is generally more correct
to boot via the EFI stub and it's expected that most users are booting via the
EFI stub on UEFI systems due to the ubiquity of SecureBoot by default on modern
hardware, so having consistent behavior whether SecureBoot is on or off is
likely to be the less buggy option generally.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1864533
Title:
grub wrongly booting via bios entry point instead of efi when
secureboot disabled
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Changed in: grub2 (Ubuntu Bionic) Status: Confirmed => In Progress ** Changed in: grub2 (Ubuntu Focal) Status: Confirmed => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Merge proposal linked: https://code.launchpad.net/~juliank/grub/+git/ubuntu/+merge/380567 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Merge proposal linked: https://code.launchpad.net/~juliank/grub/+git/ubuntu/+merge/380566 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Merge proposal linked: https://code.launchpad.net/~juliank/grub/+git/ubuntu/+merge/380563 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Changed in: grub2 (Ubuntu Focal) Assignee: (unassigned) => Julian Andres Klode (juliank) ** Changed in: grub2 (Ubuntu Bionic) Assignee: (unassigned) => Julian Andres Klode (juliank) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: grub2 (Ubuntu Bionic) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: grub2 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864533] Re: grub wrongly booting via bios entry point instead of efi when secureboot disabled
** Description changed: - Currently, the Ubuntu patches for secureboot support will boot the - kernel via the EFI stub ONLY if secureboot is enabled. This means that - if secureboot is disabled, grub wrongly skips the kernel's EFI stub, - resulting in buggy behavior (missing EFI fixups; lack of access to the - TCG log). + [SRU Justification] + Currently, the Ubuntu patches for secureboot support will boot the kernel via the EFI stub ONLY if secureboot is enabled. This means that if secureboot is disabled, grub wrongly skips the kernel's EFI stub, resulting in buggy behavior (missing EFI fixups; lack of access to the TCG log). When booted on EFI, grub should ALWAYS use the EFI protocol to boot the kernel, and only do a non-EFI boot as a fallback if the EFI stub is not available AND secureboot is not enabled. Patches available at https://people.canonical.com/~chrisccoulson/grub- efi-fixes/ + + [Regression potential] + This changes behavior of how grub passes control to Linux kernels when secureboot is disabled on UEFI systems, which can result in arbitrary changes to the boot process up to and including failure to boot if there are bugs in the kernel EFI stub on some platforms. However, it is generally more correct to boot via the EFI stub and it's expected that most users are booting via the EFI stub on UEFI systems due to the ubiquity of SecureBoot by default on modern hardware, so having consistent behavior whether SecureBoot is on or off is likely to be the less buggy option generally. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864533 Title: grub wrongly booting via bios entry point instead of efi when secureboot disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1864533/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
