[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
I should add the following (and indeed I should have included this within my previous post). fwupdmgr told me three devices had installable updates: Lenovo diagnostics; a Logitech wireless receiver; Intel TPM. Using @sj's method (and obtaining the device-id via `fwupdmg get- devices`) I managed to install one of diagnostics update. Upon reboot, fwupdmgr told me only one update was outstanding: the tpm one. So: the Logitech update had disappeared; and the TPM update remained uninstalled. One can see from the issue tracker for fwup that Lenovo TPM (or 'ME') updates are notorious for not installing. See: https://github.com/fwupd/firmware- lenovo/issues?q=tpm+is%3Aissue+is%3Aopen+ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
@jixbo Thank you for your post. Yet, are you saying that somehow boot-order- lock got enabled without you enabling it? Or are you saying one should toggle that option on and off again? I tried to cover both those bases on my ThinkPad - by doing the following. I rebooted, entered the BIOS, and checked the boot-order-lock setting. It was off. I set it on and then off again. I saved-and-exited. The I ran fwupd and tried to install the pending updates. All seemed well - but all was well up to this stage before - and I was prompted to reboot. Upon that reboot, it was the same old badness: as before, I saw some Lenovo update stuff flash up, disappear very quickly, and then I was back to the desktop and none of the three pending firmware updates had installed. I am heartily sick of this problem: it has been going on for at least a year now; no fix is in sight; and it is not even clear whether the problem lies with Lenovo or fwupd or with Ubuntu. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
I have a Thinkpad P14s AMD gen1, and while trying to update bios 1.35 to 1.36 (and 1.37) it would fail, and fwmgr pointed me here. I have now been hable to upgrade the bios after disabling the order lock in the BIOS, which I haven't changed, and had upgraded the bios in the past. Might be a new flag, or something else might be different, might worth trying for the people with thinkpads having issues. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
I'm impacted by this issue in ubuntu 21.10, all packages up to date. I am using a thinkpad p14s gen1 AMD and I'm not able to update the BIOS. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Changed in: shim (Fedora) Status: Confirmed => Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Launchpad has imported 1 comments from the remote bug at https://bugzilla.redhat.com/show_bug.cgi?id=2029396. If you reply to an imported comment from within Launchpad, your comment will be sent to the remote bug automatically. Read more about Launchpad's inter-bugtracker facilities at https://help.launchpad.net/InterBugTracking. On 2021-12-06T11:58:46+00:00 dennis.schridde wrote: Description of problem: shimx64.efi does not appear to boot into fwupdx64.efi (booting into "Linux-Firmware-Updater" behaves the same as booting into "Fedora", firmware updates do not get installed). Version-Release number of selected component (if applicable): Installed Packages Name : efibootmgr Version : 16 Release : 11.fc35 Architecture : x86_64 Size : 94 k Source : efibootmgr-16-11.fc35.src.rpm Repository : @System From repo: anaconda Summary : EFI Boot Manager URL : https://github.com/rhboot/efibootmgr/ License : GPLv2+ Description : efibootmgr displays and allows the user to edit the Intel Extensible : Firmware Interface (EFI) Boot Manager variables. Additional : information about EFI can be found at https://uefi.org/. Name : fwupd Version : 1.7.2 Release : 1.fc35 Architecture : x86_64 Size : 6.9 M Source : fwupd-1.7.2-1.fc35.src.rpm Repository : @System From repo: updates Summary : Firmware update daemon URL : https://github.com/fwupd/fwupd License : LGPLv2+ Description : fwupd is a daemon to allow session software to update device firmware. Name : shim-x64 Version : 15.4 Release : 5 Architecture : x86_64 Size : 3.6 M Source : shim-15.4-5.src.rpm Repository : @System From repo: anaconda Summary : First-stage UEFI bootloader URL : https://github.com/rhboot/shim/ License : BSD Description : Initial UEFI bootloader that handles chaining to a trusted full : bootloader under secure boot environments. This package contains the : version signed by the UEFI signing service. How reproducible: Every time. Steps to Reproduce: 1. Setup firmware update for installation with `fwupdmgr update` 2. Reboot computer (regularly, or manually booting into Linux-Firmware-Updater, no difference) 3. Observe that you are dropped straight into Grub. Actual results: I am being send straight into Grub. Nothing that indicates that a firmware updater (fwupdx64.efi) is being run. Expected results: Firmware should update. Additional info: This appears to be https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471 and https://github.com/fwupd/firmware-lenovo-thinkpad/issues/123 which are supposedly fixed by https://github.com/rhboot/shim/pull/379. Reply at: https://bugs.launchpad.net/ubuntu/+source/shim- signed/+bug/1929471/comments/37 ** Changed in: shim (Fedora) Status: Unknown => Confirmed ** Changed in: shim (Fedora) Importance: Unknown => Undecided ** Bug watch added: github.com/fwupd/firmware-lenovo-thinkpad/issues #123 https://github.com/fwupd/firmware-lenovo-thinkpad/issues/123 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Bug watch added: Red Hat Bugzilla #2029396 https://bugzilla.redhat.com/show_bug.cgi?id=2029396 ** Also affects: shim (Fink) via https://bugzilla.redhat.com/show_bug.cgi?id=2029396 Importance: Unknown Status: Unknown ** No longer affects: shim (Fink) ** Also affects: shim (Fedora) via https://bugzilla.redhat.com/show_bug.cgi?id=2029396 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** No longer affects: fwupd (Ubuntu Hirsute) ** No longer affects: fwupd (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim-signed - 1.37~18.04.10 --- shim-signed (1.37~18.04.10) bionic; urgency=medium * Remove unnecessary efitools dependency that prevented build on arm64 shim-signed (1.37~18.04.9) bionic; urgency=medium * New upstream release 15.4. LP: #1921134 * Synchronize packaging with 1.50, summary - Update packaging to pull fb and mm from shim-signed package as in later releases, dropping the runtime dependency on shim. - Add download-signed script from linux-signed package - Include reworked Makefile from devel to better assert the integrity of the executables. - Dual-signed shim - Set XB-Important: yes on shim-signed package so that it cannot be removed by accident (LP: #1898729) - download-signed: Fetch signed artefacts from versioned URL instead of current/ symlink to work around caching (LP: #1936640) * Update to shim 15.4-0ubuntu5: - Stop addending vendor dbx to MokListXRT during MokListX mirroring. This is causing systems to run out of EFI storage space, or just hang up when trying to write it (LP: #1924605) (LP: #1928434) - Further relax the check for variable mirroring on non-secureboot systems avoiding boot failures on out of space conditons (pull request #372) - Don't unhook ExitBootServices() when EBS protection is disabled (LP: #1931136) (pull request #378) * Update to shim 15.4-0ubuntu7: - Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) - Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) - Fix accidental deletion of RT variables (LP: #1934506) (PR #387) - mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Mon, 19 Jul 2021 17:01:19 +0200 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim - 15.4-0ubuntu7 --- shim (15.4-0ubuntu7) hirsute; urgency=medium * Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) * Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) * Fix accidental deletion of RT variables (LP: #1934506) (PR #387) * mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Wed, 07 Jul 2021 10:57:35 +0200 ** Changed in: shim (Ubuntu Bionic) Status: Fix Committed => Fix Released ** Changed in: shim-signed (Ubuntu Bionic) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim-signed - 1.33.1~16.04.10 --- shim-signed (1.33.1~16.04.10) xenial; urgency=medium * Update to shim 15.4-0ubuntu7: - Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) - Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) - Fix accidental deletion of RT variables (LP: #1934506) (PR #387) - mok: relax the maximum variable size check (LP: #1934780) (PR #369) shim-signed (1.33.1~16.04.9) xenial; urgency=medium * Do not build a dual-signed shim (fixing regression from ~16.04.7), and disable verifying fbx64.efi and mmx64.efi certificates as xenial's sbverify is unable to (impish works fine) * Clean up debhelper log file accidentally imported into git during 16.04.7 import. shim-signed (1.33.1~16.04.8) xenial; urgency=medium * debian/*.postinst: Unconditionally call grub-install with --force-extra-removable, so that the \EFI\BOOT removable path as used in cloud images receives the updates. LP: #1930742. * Update to shim 15.4-0ubuntu5: - Stop addending vendor dbx to MokListXRT during MokListX mirroring. This is causing systems to run out of EFI storage space, or just hang up when trying to write it (LP: #1924605) (LP: #1928434) - Further relax the check for variable mirroring on non-secureboot systems avoiding boot failures on out of space conditons (pull request #372) - Don't unhook ExitBootServices() when EBS protection is disabled (LP: #1931136) (pull request #378) shim-signed (1.33.1~16.04.7) xenial; urgency=medium * New upstream release 15.4. LP: #1921134 * Update packaging to pull fb and mm from shim-signed package as in later releases, dropping the runtime dependency on shim. * Add download-signed script from linux-signed package * Add a versioned dependency on the mokutil that introduces --timeout, and call mokutil --timeout -1 so that users don't end up with broken systems by missing MokManager on reboot after install. LP: #1856422. * Add versioned dependencies on grub-efi-amd64-signed and grub2-common, to ensure we have SBAT-compatible grub.efi and grub 2.04-compatible grub-install present when we are installing new shim to the ESP. * Include reworked Makefile from devel to better assert the integrity of the executables. -- Julian Andres Klode Fri, 16 Jul 2021 13:04:57 +0200 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim - 15.4-0ubuntu7 --- shim (15.4-0ubuntu7) hirsute; urgency=medium * Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) * Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) * Fix accidental deletion of RT variables (LP: #1934506) (PR #387) * mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Wed, 07 Jul 2021 10:57:35 +0200 ** Changed in: shim (Ubuntu Xenial) Status: Fix Committed => Fix Released ** Changed in: shim-signed (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Is it really fixed, though? I have shim-signed 1.40.6 and fwupd still fails to do anything upon reboot. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim-signed - 1.40.6 --- shim-signed (1.40.6) focal; urgency=medium * Update to shim 15.4-0ubuntu7: - Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) - Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) - Fix accidental deletion of RT variables (LP: #1934506) (PR #387) - mok: relax the maximum variable size check (LP: #1934780) (PR #369) * download-signed: Fetch signed artefacts from versioned URL instead of current/ symlink to work around caching (LP: #1936640) shim-signed (1.40.5) focal; urgency=medium * New upstream release 15.4. LP: #1921134 * Synchronize packaging with 1.48, summary - Update packaging to pull fb and mm from shim-signed package as in later releases, dropping the runtime dependency on shim. - Add download-signed script from linux-signed package - Include reworked Makefile from devel to better assert the integrity of the executables. - Dual-signed shim - Set XB-Important: yes and Protected: yes on shim-signed package so that it cannot be removed by accident (LP: #1898729) * Update to shim 15.4-0ubuntu5: - Stop addending vendor dbx to MokListXRT during MokListX mirroring. This is causing systems to run out of EFI storage space, or just hang up when trying to write it (LP: #1924605) (LP: #1928434) - Further relax the check for variable mirroring on non-secureboot systems avoiding boot failures on out of space conditons (pull request #372) - Don't unhook ExitBootServices() when EBS protection is disabled (LP: #1931136) (pull request #378) -- Julian Andres Klode Fri, 16 Jul 2021 13:33:00 +0200 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim - 15.4-0ubuntu7 --- shim (15.4-0ubuntu7) hirsute; urgency=medium * Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) * Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) * Fix accidental deletion of RT variables (LP: #1934506) (PR #387) * mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Wed, 07 Jul 2021 10:57:35 +0200 ** Changed in: shim (Ubuntu Focal) Status: Fix Committed => Fix Released ** Changed in: shim-signed (Ubuntu Focal) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim - 15.4-0ubuntu7 --- shim (15.4-0ubuntu7) hirsute; urgency=medium * Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) * Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) * Fix accidental deletion of RT variables (LP: #1934506) (PR #387) * mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Wed, 07 Jul 2021 10:57:35 +0200 ** Changed in: shim (Ubuntu Hirsute) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim-signed - 1.50 --- shim-signed (1.50) impish; urgency=medium * download-signed: Fetch signed artefacts from versioned URL instead of current/ symlink to work around caching (LP: #1936640) -- Julian Andres Klode Fri, 16 Jul 2021 13:18:10 +0200 ** Changed in: shim-signed (Ubuntu Hirsute) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
So, the regression potential is wrong and the fallback code I was thinking of does not exist. This seems to have caused a regression in bug 1937115. This will affect some systems that contain garbage in default boot order entries that still gets parsed as a valid second stage loader. This should only be a problem when booting installer media, and maybe when booting via fallback, though I guess fallback will fix that issue before loading grub? ** Description changed: [Impact] fwupd does not load, can't upgrade firmware [Test plan] Try reinstall a firmware upgrade, make sure fwupd loads. Make sure you use secure boot. It's OK testing this in one release, as the fix is entirely shim-side and it's binary-copied. [Where problems could occur] - We might fail to load fwupd on other systems. There should be no problem loading grub, as shim will always fall back to it if it can't load a specified boot loader. + We might fail to boot from BIOS generated boot entries, as in 1937115 [Original bug report] I am running hirsute on Thinkpad X1 Carbon gen 7. Fwupdmgr used to work on groovy. Now, fwupdmgr detects new firmware, successfully places the .cap file in /boot/efi/EFI/ubuntu/fw/, successfully sets efi "next boot" to 2 which is "Linux-Firmware-Updater", but on reboot, there are no signs that fwupdx64 was attempted to be executed, and system drops directly into grub. Same when I use BIOS boot menu. There are entries for "ubuntu" and for "Linux firmware updater", but selecting any of them boots grub. After boot, EFI "BootCurrent" points to the updater entry, though it apparently did not run! $ efibootmgr -v|head BootCurrent: 0002 Timeout: 0 seconds BootOrder: 0001,0019,001A,001B,001C,001D,001E,001F,0020,0021,0022,0023,0024,0002 Boot0001* ubuntu HD(1,GPT,6ccce482-e2c2-48ca-991e-608bee5d38af,0x800,0x10)/File(\EFI\ubuntu\shimx64.efi) Boot0002* Linux-Firmware-Updater HD(1,GPT,6ccce482-e2c2-48ca-991e-608bee5d38af,0x800,0x10)/File(\EFI\ubuntu\shimx64.efi)\.f.w.u.p.d.x.6.4...e.f.i... Boot0010 Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9) Boot0011 Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850) Boot0012 Diagnostic Splash Screen FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380) Boot0013 Lenovo Diagnostics FvFile(3f7e615b-0d45-4f80-88dc-26b234958560) Boot0014 Regulatory Information FvFile(478c92a0-2622-42b7-a65d-5894169e4d24) These sympptoms match precisely a previous bug: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1864223 Could it be that the fix introduced then was lost, maybe due to signing schedule? There is a github ticket https://github.com/fwupd/firmware-lenovo- thinkpad/issues/123 that could be explained by this problem too. My versions of related packages: shim-signed: Installed: 1.47+15.4-0ubuntu2 fwupd-signed: Installed: 1.38+1.5.8-0ubuntu1 grub-efi-amd64-signed: Installed: 1.169+2.04-1ubuntu45 ProblemType: Bug DistroRelease: Ubuntu 21.04 Package: shim-signed 1.47+15.4-0ubuntu2 ProcVersionSignature: Ubuntu 5.11.0-17.18-generic 5.11.12 Uname: Linux 5.11.0-17-generic x86_64 .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled' ApportVersion: 2.20.11-0ubuntu65 Architecture: amd64 CasperMD5CheckResult: unknown CurrentDesktop: ubuntu:GNOME Date: Mon May 24 23:28:40 2021 InstallationDate: Installed on 2020-01-02 (508 days ago) InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Alpha amd64 (20190802) SecureBoot: 6 0 0 0 1 SourcePackage: shim-signed UpgradeStatus: Upgraded to hirsute on 2021-02-22 (91 days ago) ** Description changed: [Impact] fwupd does not load, can't upgrade firmware [Test plan] Try reinstall a firmware upgrade, make sure fwupd loads. Make sure you use secure boot. It's OK testing this in one release, as the fix is entirely shim-side and it's binary-copied. [Where problems could occur] - We might fail to boot from BIOS generated boot entries, as in 1937115 + We might fail to boot from BIOS generated boot entries, as in bug 1937115 [Original bug report] I am running hirsute on Thinkpad X1 Carbon gen 7. Fwupdmgr used to work on groovy. Now, fwupdmgr detects new firmware, successfully places the .cap file in /boot/efi/EFI/ubuntu/fw/, successfully sets efi "next boot" to 2 which is "Linux-Firmware-Updater", but on reboot, there are no signs that fwupdx64 was attempted to be executed, and system drops directly into grub. Same when I use BIOS boot menu. There are entries for "ubuntu" and for "Linux firmware updater", but selecting any of them boots grub. After boot, EFI "BootCurrent" points to the updater entry, though it apparently did not run! $ efibootmgr -v|head BootCurrent: 0002 Timeout: 0 seconds BootOrder: 0001,0019,001A,001B,001C,001D,001E,001F,0020,0021,002
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
OK so I'm actually going to mark this as verified, since I verified the load option parsing fix in 15.4-0ubuntu7 that makes it find the correct binaries, and will leave the verification of the fwupd's SBAT stuff to the fwupd SRUs. ** Tags removed: verification-needed verification-needed-bionic verification-needed-focal ** Tags added: verification-done verification-done-bionic verification-done-focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
fwupd is not being run on xenial. need to verify against new fwupd on focal; bionic fwupd SRU still unapproved. ** Tags removed: verification-needed-xenial ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Per my understanding, for focal, we still wait for sbat-compatible fwupd landing. Without that, the new shim will make the current focal/fwupd failed in secure-boot-enabled machine. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Hello Eugene, or anyone else affected, Accepted shim-signed into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/shim- signed/1.33.1~16.04.10 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-xenial. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: shim-signed (Ubuntu Xenial) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Hello Eugene, or anyone else affected, Accepted shim-signed into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/shim- signed/1.37~18.04.9 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-bionic. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: shim-signed (Ubuntu Bionic) Status: New => Fix Committed ** Changed in: shim (Ubuntu Xenial) Status: New => Fix Committed ** Tags added: verification-needed-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Hello Eugene, or anyone else affected, Accepted shim into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/shim/15.4-0ubuntu7 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-bionic. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: shim (Ubuntu Bionic) Status: New => Fix Committed ** Tags added: verification-needed-bionic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Changed in: shim-signed (Ubuntu Hirsute) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Tags removed: verification-needed-hirsute ** Tags added: verification-done-hirsute -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Hello Eugene, or anyone else affected, Accepted shim-signed into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/shim-signed/1.40.6 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-focal. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: shim-signed (Ubuntu Focal) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Hello Eugene, or anyone else affected, Accepted shim into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/shim/15.4-0ubuntu7 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-focal. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: shim (Ubuntu Focal) Status: New => Fix Committed ** Tags added: verification-needed-focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Hello Eugene, or anyone else affected, Accepted shim into hirsute-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/shim/15.4-0ubuntu7 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- hirsute to verification-done-hirsute. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-hirsute. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: shim (Ubuntu Hirsute) Status: Confirmed => Fix Committed ** Tags added: verification-needed verification-needed-hirsute -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim-signed - 1.49 --- shim-signed (1.49) impish; urgency=medium * Update to shim 15.4-0ubuntu7: - Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) - Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) - Fix accidental deletion of RT variables (LP: #1934506) (PR #387) - mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Thu, 15 Jul 2021 11:00:51 +0200 ** Changed in: shim-signed (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Description changed: - I am running hirsute on Thinkpad X1 Carbon gen 7. Fwupdmgr used to work - on groovy. Now, fwupdmgr detects new firmware, successfully places the - .cap file in /boot/efi/EFI/ubuntu/fw/, successfully sets efi "next boot" - to 2 which is "Linux-Firmware-Updater", but on reboot, there are no - signs that fwupdx64 was attempted to be executed, and system drops - directly into grub. + [Impact] + fwupd does not load, can't upgrade firmware + + [Test case] + Try reinstall a firmware upgrade, make sure fwupd loads. Make sure you use secure boot. It's OK testing this in one release, as the fix is entirely shim-side and it's binary-copied. + + [Where problems could occur] + We might fail to load fwupd on other systems. There should be no problem loading grub, as shim will always fall back to it if it can't load a specified boot loader. + + [Original bug report] + I am running hirsute on Thinkpad X1 Carbon gen 7. Fwupdmgr used to work on groovy. Now, fwupdmgr detects new firmware, successfully places the .cap file in /boot/efi/EFI/ubuntu/fw/, successfully sets efi "next boot" to 2 which is "Linux-Firmware-Updater", but on reboot, there are no signs that fwupdx64 was attempted to be executed, and system drops directly into grub. Same when I use BIOS boot menu. There are entries for "ubuntu" and for "Linux firmware updater", but selecting any of them boots grub. After boot, EFI "BootCurrent" points to the updater entry, though it apparently did not run! $ efibootmgr -v|head BootCurrent: 0002 Timeout: 0 seconds BootOrder: 0001,0019,001A,001B,001C,001D,001E,001F,0020,0021,0022,0023,0024,0002 Boot0001* ubuntu HD(1,GPT,6ccce482-e2c2-48ca-991e-608bee5d38af,0x800,0x10)/File(\EFI\ubuntu\shimx64.efi) Boot0002* Linux-Firmware-Updater HD(1,GPT,6ccce482-e2c2-48ca-991e-608bee5d38af,0x800,0x10)/File(\EFI\ubuntu\shimx64.efi)\.f.w.u.p.d.x.6.4...e.f.i... Boot0010 Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9) Boot0011 Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850) Boot0012 Diagnostic Splash Screen FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380) Boot0013 Lenovo Diagnostics FvFile(3f7e615b-0d45-4f80-88dc-26b234958560) Boot0014 Regulatory Information FvFile(478c92a0-2622-42b7-a65d-5894169e4d24) These sympptoms match precisely a previous bug: https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1864223 Could it be that the fix introduced then was lost, maybe due to signing schedule? There is a github ticket https://github.com/fwupd/firmware-lenovo- thinkpad/issues/123 that could be explained by this problem too. My versions of related packages: shim-signed: - Installed: 1.47+15.4-0ubuntu2 + Installed: 1.47+15.4-0ubuntu2 fwupd-signed: - Installed: 1.38+1.5.8-0ubuntu1 + Installed: 1.38+1.5.8-0ubuntu1 grub-efi-amd64-signed: - Installed: 1.169+2.04-1ubuntu45 + Installed: 1.169+2.04-1ubuntu45 ProblemType: Bug DistroRelease: Ubuntu 21.04 Package: shim-signed 1.47+15.4-0ubuntu2 ProcVersionSignature: Ubuntu 5.11.0-17.18-generic 5.11.12 Uname: Linux 5.11.0-17-generic x86_64 .proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] No such file or directory: '/proc/sys/kernel/moksbstate_disabled' ApportVersion: 2.20.11-0ubuntu65 Architecture: amd64 CasperMD5CheckResult: unknown CurrentDesktop: ubuntu:GNOME Date: Mon May 24 23:28:40 2021 InstallationDate: Installed on 2020-01-02 (508 days ago) InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Alpha amd64 (20190802) SecureBoot: 6 0 0 0 1 SourcePackage: shim-signed UpgradeStatus: Upgraded to hirsute on 2021-02-22 (91 days ago) ** Description changed: [Impact] fwupd does not load, can't upgrade firmware - [Test case] + [Test plan] Try reinstall a firmware upgrade, make sure fwupd loads. Make sure you use secure boot. It's OK testing this in one release, as the fix is entirely shim-side and it's binary-copied. [Where problems could occur] We might fail to load fwupd on other systems. There should be no problem loading grub, as shim will always fall back to it if it can't load a specified boot loader. [Original bug report] I am running hirsute on Thinkpad X1 Carbon gen 7. Fwupdmgr used to work on groovy. Now, fwupdmgr detects new firmware, successfully places the .cap file in /boot/efi/EFI/ubuntu/fw/, successfully sets efi "next boot" to 2 which is "Linux-Firmware-Updater", but on reboot, there are no signs that fwupdx64 was attempted to be executed, and system drops directly into grub. Same when I use BIOS boot menu. There are entries for "ubuntu" and for "Linux firmware updater", but selecting any of them boots grub. After boot, EFI "BootCurrent" points to the updater entry, though it apparently did not run! $ efibootmgr -v|head BootCurrent: 0002 Timeout: 0 seconds BootOrder: 0001,0019,001A,001B,001C,001D,001E,001F,0020,0021,0
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Installed shim-signed_1.49+15.4-0ubuntu7_amd64.deb from impish on hirsute, Verified that it works, I was able to install all pending firmware updates. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
This bug was fixed in the package shim - 15.4-0ubuntu7 --- shim (15.4-0ubuntu7) hirsute; urgency=medium * Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379) * Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383) * Fix accidental deletion of RT variables (LP: #1934506) (PR #387) * mok: relax the maximum variable size check (LP: #1934780) (PR #369) -- Julian Andres Klode Wed, 07 Jul 2021 10:57:35 +0200 ** Changed in: shim (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: shim (Ubuntu Hirsute) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Verified the fix worked. Updated my system firmware, EC, and something else. Hooray! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
> Chris Coulson's patch https://github.com/rhboot/shim/pull/379 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
I tried two approaches and neither worked, unfortunately :( I need to try Chris Coulson's patch, it certainly looks good. The current code to handle load option parsing is very confusing hacks around broken firmwares :/ But we also don't want to break more I guess. ** Changed in: shim (Ubuntu) Status: Fix Committed => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
As this is looking to be a shim bug, closing the fwupd tasks. ** Changed in: fwupd (Ubuntu) Status: Confirmed => Invalid ** Changed in: fwupd (Ubuntu Hirsute) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
@Eugene Hey, you can extract a signed shim from http://ppa.launchpad.net /ubuntu-uefi-team/ppa/ubuntu/dists/impish/main/signed/shim- amd64/15.4-0ubuntu3~uefi3/ once it's there. You'll have to import the control/uefi.crt into your UEFI DB to test it. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Changed in: shim-signed (Ubuntu) Status: Confirmed => In Progress ** Changed in: shim-signed (Ubuntu Hirsute) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Also affects: shim (Ubuntu) Importance: Undecided Status: New ** Changed in: shim (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
I could try to test the suggested change... I understand that I would need to - generate a key pair - roll the public key into bios - build the shim - sign the shim with the private key - set a boot entry with the new shim and updater as its parameter - try to boot via this new boot entry Is exact procedure documented somewhere? I could not even build the shim binary when I tried.. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Probably https://github.com/rhboot/shim/pull/374/commits/87fbf42ac96f887a3620efbbabc501269dc9f918 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Also affects: shim-signed (Ubuntu Hirsute) Importance: Undecided Status: New ** Also affects: fwupd (Ubuntu Hirsute) Importance: Undecided Status: New ** Tags removed: rls-hh-incoming -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Tags added: fr-1424 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: fwupd (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Also affects: fwupd (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
** Tags added: rls-hh-incoming -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1929471] Re: Shim apparently fails to run fwupd64 (hirsute regression?)
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: shim-signed (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1929471 Title: Shim apparently fails to run fwupd64 (hirsute regression?) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1929471/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
