FS#78938 - [grub] 2:2.06.r566.g857af0e17-1 breaks secure boot - error: bad shim signature

Attached to Project: Arch Linux
Opened by esprit libre (espritlibre) - Friday, 30 June 2023, 19:06 GMT
Last edited by Tobias Powalowski (tpowa) - Tuesday, 04 July 2023, 05:23 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Christian Hesse (eworm)
Architecture x86_64
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 5
Private No

Details

the grub update broke secure boot, secure boot complains "error: bad shim signature" and the system doesn't boot up. when downgrading back to grub-2:2.06.r499.ge67a551a4-2 everything works as usual. there are quite some people affected by this. here is the bbs thread
https://bbs.archlinux.org/viewtopic.php?id=286617

Additional info:
* package version(s)
grub-2:2.06.r566.g857af0e17-1 bad
grub-2:2.06.r499.ge67a551a4-2 good

* config and/or log files etc.
error: bad shim signature

Steps to reproduce:
follow the arch wiki and set up secure boot with shim. update grub to the latest version in repo.
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Tuesday, 04 July 2023, 05:23 GMT
Reason for closing:  Fixed
Additional comments about closing:  2:2.06.r591.g6425c12cd-1
Comment by Tobias Powalowski (tpowa) - Saturday, 01 July 2023, 18:40 GMT
https://lists.gnu.org/archive/html/grub-devel/2023-06/msg00121.html
Comment by esprit libre (espritlibre) - Sunday, 02 July 2023, 00:53 GMT
the patch works for me as well

grüße aus dem ländle
Comment by loqs (loqs) - Monday, 03 July 2023, 21:14 GMT
I believe the fix has been committed upstream as the following two commits:
https://git.savannah.gnu.org/cgit/grub.git/commit/?id=7082a5ca8abd79c1e8840c59759f53c4c80e286d
https://git.savannah.gnu.org/cgit/grub.git/commit/?id=6425c12cd77ad51ad24be84c092aefacf0875089

Loading...