Ubuntu
shim-signed package

grub-efi-amd64 triggers shim-signed, which fails (package shim-signed 1.34.7+13-0ubuntu2 failed to install/upgrade: installed shim-signed package post-installation script subprocess returned error exit status 1)

Bug #1766627 reported by Giulia Tilenni
68
This bug affects 9 people
Affects Status Importance Assigned to Milestone
grub2 (Ubuntu)
Triaged
Undecided
Unassigned
shim-signed (Ubuntu)
Fix Released
Critical
Unassigned

Bug Description

The package failed to install while upgrading from Lubuntu 17.10 to Lubuntu 18.04

ProblemType: Package
DistroRelease: Ubuntu 18.04
Package: shim-signed 1.34.7+13-0ubuntu2
ProcVersionSignature: Ubuntu 4.15.0-19.20-generic 4.15.17
Uname: Linux 4.15.0-19-generic x86_64
.proc.sys.kernel.moksbstate_disabled: Error: [Errno 2] File o directory non esistente: '/proc/sys/kernel/moksbstate_disabled'
ApportVersion: 2.20.9-0ubuntu6
Architecture: amd64
Date: Tue Apr 24 16:49:40 2018
DuplicateSignature:
 package:shim-signed:1.34.7+13-0ubuntu2
 Processing triggers for shim-signed (1.34.7+13-0ubuntu2) ...
 No MOK found.
 dpkg: error processing package shim-signed (--configure):
  installed shim-signed package post-installation script subprocess returned error exit status 1
EFITables:
 apr 24 16:51:43 giulia-T100HAN kernel: efi: EFI v2.40 by American Megatrends
 apr 24 16:51:43 giulia-T100HAN kernel: efi: ESRT=0x7b813018 ACPI=0x7a113000 ACPI 2.0=0x7a113000 SMBIOS=0x7b73ab18
 apr 24 16:51:43 giulia-T100HAN kernel: secureboot: Secure boot could not be determined (mode 0)
 apr 24 16:51:43 giulia-T100HAN kernel: esrt: Reserving ESRT space from 0x000000007b813018 to 0x000000007b813050.
ErrorMessage: installed shim-signed package post-installation script subprocess returned error exit status 1
InstallationDate: Installed on 2018-04-06 (18 days ago)
InstallationMedia: Lubuntu 17.10 "Artful Aardvark" - Release amd64 (20180105)
Python3Details: /usr/bin/python3.6, Python 3.6.5, python3-minimal, 3.6.5-3
PythonDetails: /usr/bin/python2.7, Python 2.7.15rc1, python-minimal, 2.7.15~rc1-1
RelatedPackageVersions:
 dpkg 1.19.0.5ubuntu2
 apt 1.6.1
SecureBoot: 6 0 0 0 0
SourcePackage: shim-signed
Title: package shim-signed 1.34.7+13-0ubuntu2 failed to install/upgrade: installed shim-signed package post-installation script subprocess returned error exit status 1
UpgradeStatus: Upgraded to bionic on 2018-04-24 (0 days ago)

Revision history for this message
Giulia Tilenni (g.til) wrote :
Apport retracing service (apport)
tags: removed: need-duplicate-check
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in shim-signed (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package shim-signed - 1.34.8

---------------
shim-signed (1.34.8) bionic; urgency=medium

  * debian/shim-signed.postinst: shim-signed's trigger to enroll a new MOK
    should not fail the upgrade if there was no MOK to enroll. (LP: #1766627)

 -- Mathieu Trudel-Lapierre <email address hidden> Tue, 24 Apr 2018 12:31:25 -0400

Changed in shim-signed (Ubuntu):
status: Confirmed → Fix Released
Revision history for this message
Steve Langasek (vorlon) wrote :

Reopening; the fix in 1.34.8 was overbroad, there is a new fix in 1.34.9 currently in bionic-proposed.

Changed in shim-signed (Ubuntu):
status: Fix Released → Fix Committed
importance: Undecided → Critical
summary: - package shim-signed 1.34.7+13-0ubuntu2 failed to install/upgrade:
- installed shim-signed package post-installation script subprocess
- returned error exit status 1
+ grub-efi-amd64 triggers shim-signed, which fails (package shim-signed
+ 1.34.7+13-0ubuntu2 failed to install/upgrade: installed shim-signed
+ package post-installation script subprocess returned error exit status
+ 1)
Revision history for this message
Steve Langasek (vorlon) wrote :

We believe grub-efi-amd64 should also be fixed to not call update-secureboot-policy anymore.

Changed in grub2 (Ubuntu):
status: New → Triaged
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package shim-signed - 1.34.9

---------------
shim-signed (1.34.9) bionic; urgency=medium

  * debian/shim-signed.postinst: check for MOK existence rather than ignoring
    failures in the trigger. (LP: #1766627)

 -- Mathieu Trudel-Lapierre <email address hidden> Tue, 24 Apr 2018 13:24:24 -0400

Changed in shim-signed (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.