Secure Boot broken with grub2 1:2.12-42.fc43.x86_64 package upgrades #13229

Closed
opened 2026-03-26 16:34:57 +00:00 by benhaube · 2 comments

Description of request

Yesterday I ran a dnf upgrade --offline transaction that upgraded a bunch of the grub2 packages, and it broke Secure Boot. After the updates applied the grub menu would no longer show up. After the system POST it would sit on a black screen. Disabling secure boot allowed my system to boot, and downgrading the grub2 packages allowed me to re-enable Secure Boot. I do not have any proprietary kernel mods installed.

Here is a dnf history info output of the offline transaction:

Transaction ID : 124
Begin time     : 2026-03-25 16:29:59
Begin rpmdb    : c83f185a13622da37946bc9d1ae6c42b7c5c8e77ee2377e8f47922b4eccfe1f2
End time       : 2026-03-25 16:30:09
End rpmdb      : d4b51374b3428859f6144d59c625fbb7e5a465bb38cba7729c3078268f51b3c7
User           : 0 Super User <root>
Status         : Ok
Releasever     : 43
Description    : dnf upgrade --offline --refresh
Comment        : 
Packages altered:
  Action   Package                                         Reason          Repository
  Upgrade  audit-0:4.1.4-1.fc43.x86_64                     Group           updates
  Upgrade  audit-libs-0:4.1.4-1.fc43.x86_64                Dependency      updates
  Upgrade  audit-rules-0:4.1.4-1.fc43.x86_64               Dependency      updates
  Upgrade  python3-audit-0:4.1.4-1.fc43.x86_64             Dependency      updates
  Upgrade  audit-libs-0:4.1.4-1.fc43.i686                  Dependency      updates
  Upgrade  fastfetch-0:2.60.0-1.fc43.x86_64                External User   updates
  Upgrade  grub2-common-1:2.12-42.fc43.noarch              Dependency      updates
  Upgrade  grub2-tools-minimal-1:2.12-42.fc43.x86_64       Dependency      updates
  Upgrade  grub2-tools-extra-1:2.12-42.fc43.x86_64         Group           updates
  Upgrade  grub2-tools-efi-1:2.12-42.fc43.x86_64           Group           updates
  Upgrade  grub2-tools-1:2.12-42.fc43.x86_64               Group           updates
  Upgrade  grub2-pc-modules-1:2.12-42.fc43.noarch          Dependency      updates
  Upgrade  grub2-pc-1:2.12-42.fc43.x86_64                  Group           updates
  Upgrade  grub2-efi-x64-modules-1:2.12-42.fc43.noarch     User            updates
  Upgrade  grub2-efi-x64-cdboot-1:2.12-42.fc43.x86_64      Group           updates
  Upgrade  grub2-efi-x64-1:2.12-42.fc43.x86_64             Group           updates
  Upgrade  grub2-efi-ia32-modules-1:2.12-42.fc43.noarch    User            updates
  Upgrade  grub2-efi-ia32-cdboot-1:2.12-42.fc43.x86_64     Group           updates
  Upgrade  grub2-efi-ia32-1:2.12-42.fc43.x86_64            Group           updates
  Upgrade  libqtforkawesome-qt61-0:0.3.2-1.16.x86_64       Dependency      home_mkittler
  Upgrade  libqtquickforkawesome-qt61-0:0.3.2-1.16.x86_64  Dependency      home_mkittler
  Upgrade  libqtutilities-qt66-0:6.20.0-1.12.x86_64        Dependency      home_mkittler
  Upgrade  libsyncthingconnector-qt634-0:2.0.9-2.15.x86_64 External User   home_mkittler
  Upgrade  libsyncthingconnector34-0:2.0.9-1.16.x86_64     External User   home_mkittler
  Upgrade  libsyncthingmodel-qt634-0:2.0.9-2.15.x86_64     User            home_mkittler
  Upgrade  libsyncthingwidgets-qt634-0:2.0.9-2.15.x86_64   User            home_mkittler
  Upgrade  mesa-dri-drivers-0:25.3.6-3.fc43.x86_64         Group           updates
  Upgrade  mesa-filesystem-0:25.3.6-3.fc43.x86_64          Dependency      updates
  Upgrade  mesa-libgbm-0:25.3.6-3.fc43.x86_64              Dependency      updates
  Upgrade  mesa-libGL-0:25.3.6-3.fc43.x86_64               Dependency      updates
  Upgrade  mesa-libEGL-0:25.3.6-3.fc43.x86_64              Dependency      updates
  Upgrade  mesa-dri-drivers-0:25.3.6-3.fc43.i686           Group           updates
  Upgrade  mesa-libgbm-0:25.3.6-3.fc43.i686                Dependency      updates
  Upgrade  mesa-libGL-0:25.3.6-3.fc43.i686                 Dependency      updates
  Upgrade  mesa-libEGL-0:25.3.6-3.fc43.i686                Dependency      updates
  Upgrade  mesa-filesystem-0:25.3.6-3.fc43.i686            Dependency      updates
  Upgrade  mesa-vulkan-drivers-0:25.3.6-3.fc43.x86_64      Group           updates
  Upgrade  mesa-vulkan-drivers-0:25.3.6-3.fc43.i686        Group           updates
  Upgrade  openssh-0:10.0p1-8.fc43.x86_64                  Dependency      updates
  Upgrade  openssh-server-0:10.0p1-8.fc43.x86_64           Group           updates
  Upgrade  openssh-clients-0:10.0p1-8.fc43.x86_64          Group           updates
  Upgrade  openssh-askpass-0:10.0p1-8.fc43.x86_64          Weak Dependency updates
  Upgrade  python3-wcwidth-0:0.6.0-1.fc43.noarch           Dependency      updates
  Upgrade  qtforkawesomeiconengine-qt6-0:0.3.2-1.16.x86_64 Dependency      home_mkittler
  Upgrade  syncthingctl-qt6-0:2.0.9-2.15.x86_64            User            home_mkittler
  Upgrade  syncthingplasmoid-qt6-0:2.0.9-2.15.x86_64       User            home_mkittler
  Replaced audit-0:4.1.3-1.fc43.x86_64                     Group           @System
  Replaced audit-libs-0:4.1.3-1.fc43.x86_64                Dependency      @System
  Replaced audit-libs-0:4.1.3-1.fc43.i686                  Dependency      @System
  Replaced audit-rules-0:4.1.3-1.fc43.x86_64               Dependency      @System
  Replaced fastfetch-0:2.59.0-1.fc43.x86_64                External User   @System
  Replaced grub2-common-1:2.12-40.fc43.noarch              Dependency      @System
  Replaced grub2-efi-ia32-1:2.12-40.fc43.x86_64            Group           @System
  Replaced grub2-efi-ia32-cdboot-1:2.12-40.fc43.x86_64     Group           @System
  Replaced grub2-efi-ia32-modules-1:2.12-40.fc43.noarch    User            @System
  Replaced grub2-efi-x64-1:2.12-40.fc43.x86_64             Group           @System
  Replaced grub2-efi-x64-cdboot-1:2.12-40.fc43.x86_64      Group           @System
  Replaced grub2-efi-x64-modules-1:2.12-40.fc43.noarch     User            @System
  Replaced grub2-pc-1:2.12-40.fc43.x86_64                  Group           @System
  Replaced grub2-pc-modules-1:2.12-40.fc43.noarch          Dependency      @System
  Replaced grub2-tools-1:2.12-40.fc43.x86_64               Group           @System
  Replaced grub2-tools-efi-1:2.12-40.fc43.x86_64           Group           @System
  Replaced grub2-tools-extra-1:2.12-40.fc43.x86_64         Group           @System
  Replaced grub2-tools-minimal-1:2.12-40.fc43.x86_64       Dependency      @System
  Replaced libqtforkawesome-qt61-0:0.3.2-1.15.x86_64       Dependency      @System
  Replaced libqtquickforkawesome-qt61-0:0.3.2-1.15.x86_64  Dependency      @System
  Replaced libqtutilities-qt66-0:6.20.0-1.11.x86_64        Dependency      @System
  Replaced libsyncthingconnector-qt634-0:2.0.9-2.14.x86_64 External User   @System
  Replaced libsyncthingconnector34-0:2.0.9-1.15.x86_64     External User   @System
  Replaced libsyncthingmodel-qt634-0:2.0.9-2.14.x86_64     User            @System
  Replaced libsyncthingwidgets-qt634-0:2.0.9-2.14.x86_64   User            @System
  Replaced mesa-dri-drivers-0:25.3.6-2.fc43.x86_64         Group           @System
  Replaced mesa-dri-drivers-0:25.3.6-2.fc43.i686           Group           @System
  Replaced mesa-filesystem-0:25.3.6-2.fc43.x86_64          Dependency      @System
  Replaced mesa-filesystem-0:25.3.6-2.fc43.i686            Dependency      @System
  Replaced mesa-libEGL-0:25.3.6-2.fc43.x86_64              Dependency      @System
  Replaced mesa-libEGL-0:25.3.6-2.fc43.i686                Dependency      @System
  Replaced mesa-libGL-0:25.3.6-2.fc43.x86_64               Dependency      @System
  Replaced mesa-libGL-0:25.3.6-2.fc43.i686                 Dependency      @System
  Replaced mesa-libgbm-0:25.3.6-2.fc43.x86_64              Dependency      @System
  Replaced mesa-libgbm-0:25.3.6-2.fc43.i686                Dependency      @System
  Replaced mesa-vulkan-drivers-0:25.3.6-2.fc43.x86_64      Group           @System
  Replaced mesa-vulkan-drivers-0:25.3.6-2.fc43.i686        Group           @System
  Replaced openssh-0:10.0p1-7.fc43.x86_64                  Dependency      @System
  Replaced openssh-askpass-0:10.0p1-7.fc43.x86_64          Weak Dependency @System
  Replaced openssh-clients-0:10.0p1-7.fc43.x86_64          Group           @System
  Replaced openssh-server-0:10.0p1-7.fc43.x86_64           Group           @System
  Replaced python3-audit-0:4.1.3-1.fc43.x86_64             Dependency      @System
  Replaced python3-wcwidth-0:0.2.13-16.fc43.noarch         Dependency      @System
  Replaced qtforkawesomeiconengine-qt6-0:0.3.2-1.15.x86_64 Dependency      @System
  Replaced syncthingctl-qt6-0:2.0.9-2.14.x86_64            User            @System
  Replaced syncthingplasmoid-qt6-0:2.0.9-2.14.x86_64       User            @System

This morning I got an update from fwupdmgr for the 'UEFI Secure Boot dbx'. I was hoping that update would fix the Secure Boot issue, but it did not. Right now the only way to fix the issue is to downgrade to the older grub2 packages.

### Description of request Yesterday I ran a `dnf upgrade --offline` transaction that upgraded a bunch of the grub2 packages, and it broke Secure Boot. After the updates applied the grub menu would no longer show up. After the system POST it would sit on a black screen. Disabling secure boot allowed my system to boot, and downgrading the grub2 packages allowed me to re-enable Secure Boot. I do not have any proprietary kernel mods installed. Here is a `dnf history info` output of the offline transaction: ``` Transaction ID : 124 Begin time : 2026-03-25 16:29:59 Begin rpmdb : c83f185a13622da37946bc9d1ae6c42b7c5c8e77ee2377e8f47922b4eccfe1f2 End time : 2026-03-25 16:30:09 End rpmdb : d4b51374b3428859f6144d59c625fbb7e5a465bb38cba7729c3078268f51b3c7 User : 0 Super User <root> Status : Ok Releasever : 43 Description : dnf upgrade --offline --refresh Comment : Packages altered: Action Package Reason Repository Upgrade audit-0:4.1.4-1.fc43.x86_64 Group updates Upgrade audit-libs-0:4.1.4-1.fc43.x86_64 Dependency updates Upgrade audit-rules-0:4.1.4-1.fc43.x86_64 Dependency updates Upgrade python3-audit-0:4.1.4-1.fc43.x86_64 Dependency updates Upgrade audit-libs-0:4.1.4-1.fc43.i686 Dependency updates Upgrade fastfetch-0:2.60.0-1.fc43.x86_64 External User updates Upgrade grub2-common-1:2.12-42.fc43.noarch Dependency updates Upgrade grub2-tools-minimal-1:2.12-42.fc43.x86_64 Dependency updates Upgrade grub2-tools-extra-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-tools-efi-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-tools-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-pc-modules-1:2.12-42.fc43.noarch Dependency updates Upgrade grub2-pc-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-efi-x64-modules-1:2.12-42.fc43.noarch User updates Upgrade grub2-efi-x64-cdboot-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-efi-x64-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-efi-ia32-modules-1:2.12-42.fc43.noarch User updates Upgrade grub2-efi-ia32-cdboot-1:2.12-42.fc43.x86_64 Group updates Upgrade grub2-efi-ia32-1:2.12-42.fc43.x86_64 Group updates Upgrade libqtforkawesome-qt61-0:0.3.2-1.16.x86_64 Dependency home_mkittler Upgrade libqtquickforkawesome-qt61-0:0.3.2-1.16.x86_64 Dependency home_mkittler Upgrade libqtutilities-qt66-0:6.20.0-1.12.x86_64 Dependency home_mkittler Upgrade libsyncthingconnector-qt634-0:2.0.9-2.15.x86_64 External User home_mkittler Upgrade libsyncthingconnector34-0:2.0.9-1.16.x86_64 External User home_mkittler Upgrade libsyncthingmodel-qt634-0:2.0.9-2.15.x86_64 User home_mkittler Upgrade libsyncthingwidgets-qt634-0:2.0.9-2.15.x86_64 User home_mkittler Upgrade mesa-dri-drivers-0:25.3.6-3.fc43.x86_64 Group updates Upgrade mesa-filesystem-0:25.3.6-3.fc43.x86_64 Dependency updates Upgrade mesa-libgbm-0:25.3.6-3.fc43.x86_64 Dependency updates Upgrade mesa-libGL-0:25.3.6-3.fc43.x86_64 Dependency updates Upgrade mesa-libEGL-0:25.3.6-3.fc43.x86_64 Dependency updates Upgrade mesa-dri-drivers-0:25.3.6-3.fc43.i686 Group updates Upgrade mesa-libgbm-0:25.3.6-3.fc43.i686 Dependency updates Upgrade mesa-libGL-0:25.3.6-3.fc43.i686 Dependency updates Upgrade mesa-libEGL-0:25.3.6-3.fc43.i686 Dependency updates Upgrade mesa-filesystem-0:25.3.6-3.fc43.i686 Dependency updates Upgrade mesa-vulkan-drivers-0:25.3.6-3.fc43.x86_64 Group updates Upgrade mesa-vulkan-drivers-0:25.3.6-3.fc43.i686 Group updates Upgrade openssh-0:10.0p1-8.fc43.x86_64 Dependency updates Upgrade openssh-server-0:10.0p1-8.fc43.x86_64 Group updates Upgrade openssh-clients-0:10.0p1-8.fc43.x86_64 Group updates Upgrade openssh-askpass-0:10.0p1-8.fc43.x86_64 Weak Dependency updates Upgrade python3-wcwidth-0:0.6.0-1.fc43.noarch Dependency updates Upgrade qtforkawesomeiconengine-qt6-0:0.3.2-1.16.x86_64 Dependency home_mkittler Upgrade syncthingctl-qt6-0:2.0.9-2.15.x86_64 User home_mkittler Upgrade syncthingplasmoid-qt6-0:2.0.9-2.15.x86_64 User home_mkittler Replaced audit-0:4.1.3-1.fc43.x86_64 Group @System Replaced audit-libs-0:4.1.3-1.fc43.x86_64 Dependency @System Replaced audit-libs-0:4.1.3-1.fc43.i686 Dependency @System Replaced audit-rules-0:4.1.3-1.fc43.x86_64 Dependency @System Replaced fastfetch-0:2.59.0-1.fc43.x86_64 External User @System Replaced grub2-common-1:2.12-40.fc43.noarch Dependency @System Replaced grub2-efi-ia32-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-efi-ia32-cdboot-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-efi-ia32-modules-1:2.12-40.fc43.noarch User @System Replaced grub2-efi-x64-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-efi-x64-cdboot-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-efi-x64-modules-1:2.12-40.fc43.noarch User @System Replaced grub2-pc-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-pc-modules-1:2.12-40.fc43.noarch Dependency @System Replaced grub2-tools-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-tools-efi-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-tools-extra-1:2.12-40.fc43.x86_64 Group @System Replaced grub2-tools-minimal-1:2.12-40.fc43.x86_64 Dependency @System Replaced libqtforkawesome-qt61-0:0.3.2-1.15.x86_64 Dependency @System Replaced libqtquickforkawesome-qt61-0:0.3.2-1.15.x86_64 Dependency @System Replaced libqtutilities-qt66-0:6.20.0-1.11.x86_64 Dependency @System Replaced libsyncthingconnector-qt634-0:2.0.9-2.14.x86_64 External User @System Replaced libsyncthingconnector34-0:2.0.9-1.15.x86_64 External User @System Replaced libsyncthingmodel-qt634-0:2.0.9-2.14.x86_64 User @System Replaced libsyncthingwidgets-qt634-0:2.0.9-2.14.x86_64 User @System Replaced mesa-dri-drivers-0:25.3.6-2.fc43.x86_64 Group @System Replaced mesa-dri-drivers-0:25.3.6-2.fc43.i686 Group @System Replaced mesa-filesystem-0:25.3.6-2.fc43.x86_64 Dependency @System Replaced mesa-filesystem-0:25.3.6-2.fc43.i686 Dependency @System Replaced mesa-libEGL-0:25.3.6-2.fc43.x86_64 Dependency @System Replaced mesa-libEGL-0:25.3.6-2.fc43.i686 Dependency @System Replaced mesa-libGL-0:25.3.6-2.fc43.x86_64 Dependency @System Replaced mesa-libGL-0:25.3.6-2.fc43.i686 Dependency @System Replaced mesa-libgbm-0:25.3.6-2.fc43.x86_64 Dependency @System Replaced mesa-libgbm-0:25.3.6-2.fc43.i686 Dependency @System Replaced mesa-vulkan-drivers-0:25.3.6-2.fc43.x86_64 Group @System Replaced mesa-vulkan-drivers-0:25.3.6-2.fc43.i686 Group @System Replaced openssh-0:10.0p1-7.fc43.x86_64 Dependency @System Replaced openssh-askpass-0:10.0p1-7.fc43.x86_64 Weak Dependency @System Replaced openssh-clients-0:10.0p1-7.fc43.x86_64 Group @System Replaced openssh-server-0:10.0p1-7.fc43.x86_64 Group @System Replaced python3-audit-0:4.1.3-1.fc43.x86_64 Dependency @System Replaced python3-wcwidth-0:0.2.13-16.fc43.noarch Dependency @System Replaced qtforkawesomeiconengine-qt6-0:0.3.2-1.15.x86_64 Dependency @System Replaced syncthingctl-qt6-0:2.0.9-2.14.x86_64 User @System Replaced syncthingplasmoid-qt6-0:2.0.9-2.14.x86_64 User @System ``` This morning I got an update from `fwupdmgr` for the 'UEFI Secure Boot dbx'. I was hoping that update would fix the Secure Boot issue, but it did not. Right now the only way to fix the issue is to downgrade to the older grub2 packages.
Member

This project on forge is about problems that packagers have with the infrastructure of Fedora, mostly when they are creating fedora. And not usually for problems users of fedora have.

You probably want to file a bug with the grub2 package here:

https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=grub2

This project on forge is about problems that packagers have with the infrastructure of Fedora, mostly when they are creating fedora. And not usually for problems users of fedora have. You probably want to file a bug with the grub2 package here: https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=grub2
james closed this issue 2026-03-26 19:19:43 +00:00

There's a similar report at https://bugzilla.redhat.com/show_bug.cgi?id=2451630 which indicates theming might be a problem?

There's a similar report at https://bugzilla.redhat.com/show_bug.cgi?id=2451630 which indicates theming might be a problem?
Sign in to join this conversation.
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
infra/tickets#13229
No description provided.