FS#78938 : [grub] 2:2.06.r566.g857af0e17-1 breaks secure boot

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#78938 - [grub] 2:2.06.r566.g857af0e17-1 breaks secure boot - error: bad shim signature

Attached to Project: Arch Linux
Opened by esprit libre (espritlibre) - Friday, 30 June 2023, 19:06 GMT
Last edited by Tobias Powalowski (tpowa) - Tuesday, 04 July 2023, 05:23 GMT

Task Type	Bug Report
Category	Packages: Core
Status	Closed
Assigned To	Tobias Powalowski (tpowa) Christian Hesse (eworm)
Architecture	x86_64
Severity	Medium
Priority	Normal
Reported Version
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	5 Rayshabh (rayshabh) (2023-07-01) Brainos (Brainos) (2023-07-01) Eli Forman (elimpfor) (2023-06-30) Ioannis Kozanitis (giannis-arch) (2023-06-30) esprit libre (espritlibre) (2023-06-30)
Private	No

Details

the grub update broke secure boot, secure boot complains "error: bad shim signature" and the system doesn't boot up. when downgrading back to grub-2:2.06.r499.ge67a551a4-2 everything works as usual. there are quite some people affected by this. here is the bbs thread
https://bbs.archlinux.org/viewtopic.php?id=286617

Additional info:
* package version(s)
grub-2:2.06.r566.g857af0e17-1 bad
grub-2:2.06.r499.ge67a551a4-2 good

* config and/or log files etc.
error: bad shim signature

Steps to reproduce:
follow the arch wiki and set up secure boot with shim. update grub to the latest version in repo.

This task depends upon

Closed by Tobias Powalowski (tpowa)
Tuesday, 04 July 2023, 05:23 GMT
Reason for closing: Fixed
Additional comments about closing: 2:2.06.r591.g6425c12cd-1