Secure Boot broken with grub2 1:2.12-42.fc43.x86_64 package upgrades #13229
Labels
No labels
announcement
anubis
authentication
aws
backlog
blocked
bodhi
ci
cloud
communishift
copr
database
day-to-day
dc-move
deprecated
dev
discourse
dns
downloads
easyfix
epel
firmitas
forgejo_migration
Gain
High
Gain
Low
Gain
Medium
gitlab
greenwave
hardware
help wanted
high-trouble
koji
koschei
lists
low-trouble
medium-trouble
mirrorlists
monitoring
Needs investigation
odcs
OpenShift
ops
outage
packager_workflow_blocker
pagure
permissions
Priority
Needs Review
Priority
Next Meeting
Priority
🔥 URGENT 🔥
Priority
Waiting on Assignee
Priority
Waiting on External
Priority
Waiting on Reporter
rabbitmq
release-monitoring
releng
request-for-resources
s390x
security
SMTP
sprint-0
sprint-1
src.fp.o
staging
unfreeze
waiverdb
websites-general
wiki
Backlog Status
Needs Review
Backlog Status
Ready
chore
documentation
points
01
points
02
points
03
points
05
points
08
points
13
Priority
High
Priority
Low
Priority
Medium
Sprint Status
Blocked
Sprint Status
Done
Sprint Status
In Progress
Sprint Status
Review
Sprint Status
To Do
Technical Debt
Work Item
Bug
Work Item
Epic
Work Item
Spike
Work Item
Task
Work Item
User Story
No milestone
No project
No assignees
3 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
infra/tickets#13229
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Description of request
Yesterday I ran a
dnf upgrade --offlinetransaction that upgraded a bunch of the grub2 packages, and it broke Secure Boot. After the updates applied the grub menu would no longer show up. After the system POST it would sit on a black screen. Disabling secure boot allowed my system to boot, and downgrading the grub2 packages allowed me to re-enable Secure Boot. I do not have any proprietary kernel mods installed.Here is a
dnf history infooutput of the offline transaction:This morning I got an update from
fwupdmgrfor the 'UEFI Secure Boot dbx'. I was hoping that update would fix the Secure Boot issue, but it did not. Right now the only way to fix the issue is to downgrade to the older grub2 packages.This project on forge is about problems that packagers have with the infrastructure of Fedora, mostly when they are creating fedora. And not usually for problems users of fedora have.
You probably want to file a bug with the grub2 package here:
https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=grub2
There's a similar report at https://bugzilla.redhat.com/show_bug.cgi?id=2451630 which indicates theming might be a problem?