Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)
Anand Kumria
akumria at gmail.com
Mon Mar 8 03:20:08 GMT 2021
Package: grub-efi-amd64
Version: 2.04-16
Severity: critical
Justification: breaks unrelated software
X-Debbugs-Cc: akumria at gmail.com
Dear Maintainer,
* What led up to the situation?
A Toshiba laptop with a single disk, with GPT partitions, a few days ago performed a normal upgrade:
...
2021-03-03 16:21:30 status installed man-db:amd64 2.9.4-2
2021-03-04 06:44:34 startup archives unpack
2021-03-04 06:44:34 upgrade grub2-common:amd64 2.04-15 2.04-16
2021-03-04 06:44:34 status half-configured grub2-common:amd64 2.04-15
2021-03-04 06:44:34 status unpacked grub2-common:amd64 2.04-15
2021-03-04 06:44:34 status half-installed grub2-common:amd64 2.04-15
2021-03-04 06:44:34 status triggers-pending man-db:amd64 2.9.4-2
2021-03-04 06:44:34 status unpacked grub2-common:amd64 2.04-16
2021-03-04 06:44:35 upgrade grub-efi-amd64:amd64 2.04-15 2.04-16
2021-03-04 06:44:35 status half-configured grub-efi-amd64:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64:amd64 2.04-15
2021-03-04 06:44:35 status half-installed grub-efi-amd64:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:35 upgrade grub-efi-amd64-bin:amd64 2.04-15 2.04-16
2021-03-04 06:44:35 status half-configured grub-efi-amd64-bin:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64-bin:amd64 2.04-15
2021-03-04 06:44:35 status half-installed grub-efi-amd64-bin:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:35 upgrade grub-common:amd64 2.04-15 2.04-16
2021-03-04 06:44:35 status half-configured grub-common:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-common:amd64 2.04-15
2021-03-04 06:44:35 status half-installed grub-common:amd64 2.04-15
2021-03-04 06:44:36 status unpacked grub-common:amd64 2.04-16
2021-03-04 06:44:36 startup packages configure
2021-03-04 06:44:36 configure grub-common:amd64 2.04-16 <none>
2021-03-04 06:44:36 status unpacked grub-common:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub-common:amd64 2.04-16
2021-03-04 06:44:36 status installed grub-common:amd64 2.04-16
2021-03-04 06:44:36 configure grub-efi-amd64-bin:amd64 2.04-16 <none>
2021-03-04 06:44:36 status unpacked grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:36 status installed grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:36 configure grub2-common:amd64 2.04-16 <none>
2021-03-04 06:44:36 status unpacked grub2-common:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub2-common:amd64 2.04-16
2021-03-04 06:44:36 status installed grub2-common:amd64 2.04-16
2021-03-04 06:44:36 configure grub-efi-amd64:amd64 2.04-16 <none>
2021-03-04 06:44:36 status unpacked grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:49 status installed grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:49 trigproc man-db:amd64 2.9.4-2 <none>
2021-03-04 06:44:49 status half-configured man-db:amd64 2.9.4-2
2021-03-04 06:44:50 status installed man-db:amd64 2.9.4-2
...
During the course of this upgrade, I was prompted to run:
$ /usr/share/debconf/fix_db.pl
Do to some debconf database corrupt (I believe the package which prompted this was either mysql-common or mariadb-common)
I recall some questions / answers related to linux (and potentially grub) being removed due to there being no corresponding question (or similiar)
* What exactly did you do (or not do) that was effective (or
ineffective)?
Rebooted on 7 Mar
* What was the outcome of this action?
grub went into grub rescue mode and displayed:
error: symbol `grub_is_lockdown` not found
* What outcome did you expect instead?
A reboot into a functioning system.
Currently, I am booting using a rescue CD and then entering commands to manually start the laptop
-- Package-specific info:
*********************** BEGIN /proc/mounts
/dev/sda5 / ext4 rw,relatime,errors=remount-ro 0 0
/dev/sda6 /home ext4 rw,relatime 0 0
/dev/sda2 /boot/efi vfat rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro 0 0
*********************** END /proc/mounts
*********************** BEGIN /boot/grub/device.map
(hd0) /dev/disk/by-id/ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY
*********************** END /boot/grub/device.map
*********************** BEGIN /boot/grub/grub.cfg
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#
### BEGIN /etc/grub.d/00_header ###
if [ -s $prefix/grubenv ]; then
set have_grubenv=true
load_env
fi
if [ "${next_entry}" ] ; then
set default="${next_entry}"
set next_entry=
save_env next_entry
set boot_once=true
else
set default="0"
fi
if [ x"${feature_menuentry_id}" = xy ]; then
menuentry_id_option="--id"
else
menuentry_id_option=""
fi
export menuentry_id_option
if [ "${prev_saved_entry}" ]; then
set saved_entry="${prev_saved_entry}"
save_env saved_entry
set prev_saved_entry=
save_env prev_saved_entry
set boot_once=true
fi
function savedefault {
if [ -z "${boot_once}" ]; then
saved_entry="${chosen}"
save_env saved_entry
fi
}
function load_video {
if [ x$feature_all_video_module = xy ]; then
insmod all_video
else
insmod efi_gop
insmod efi_uga
insmod ieee1275_fb
insmod vbe
insmod vga
insmod video_bochs
insmod video_cirrus
fi
}
if [ x$feature_default_font_path = xy ] ; then
font=unicode
else
insmod part_gpt
insmod ext2
set root='hd0,gpt5'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt5 --hint-efi=hd0,gpt5 --hint-baremetal=ahci0,gpt5 --hint='hd0,gpt5' a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
else
search --no-floppy --fs-uuid --set=root a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
fi
font="/usr/share/grub/unicode.pf2"
fi
if loadfont $font ; then
set gfxmode=auto
load_video
insmod gfxterm
set locale_dir=$prefix/locale
set lang=en_GB
insmod gettext
fi
terminal_output gfxterm
if [ "${recordfail}" = 1 ] ; then
set timeout=30
else
if [ x$feature_timeout_style = xy ] ; then
set timeout_style=menu
set timeout=5
# Fallback normal timeout code in case the timeout_style feature is
# unavailable.
else
set timeout=5
fi
fi
### END /etc/grub.d/00_header ###
### BEGIN /etc/grub.d/05_debian_theme ###
insmod part_gpt
insmod ext2
set root='hd0,gpt5'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt5 --hint-efi=hd0,gpt5 --hint-baremetal=ahci0,gpt5 --hint='hd0,gpt5' a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
else
search --no-floppy --fs-uuid --set=root a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
fi
insmod png
if background_image /usr/share/desktop-base/homeworld-theme/grub/grub-16x9.png; then
set color_normal=white/black
set color_highlight=black/white
else
set menu_color_normal=cyan/blue
set menu_color_highlight=white/blue
fi
### END /etc/grub.d/05_debian_theme ###
### BEGIN /etc/grub.d/10_linux ###
function gfxmode {
set gfxpayload="${1}"
}
set linux_gfx_mode=
export linux_gfx_mode
menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-a49dde0e-f2e4-4679-8c56-b9013d7b0fd2' {
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_gpt
insmod ext2
set root='hd0,gpt5'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt5 --hint-efi=hd0,gpt5 --hint-baremetal=ahci0,gpt5 --hint='hd0,gpt5' a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
else
search --no-floppy --fs-uuid --set=root a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
fi
echo 'Loading Linux 5.8.0-2-amd64 ...'
linux /boot/vmlinuz-5.8.0-2-amd64 root=UUID=a49dde0e-f2e4-4679-8c56-b9013d7b0fd2 ro quiet
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-5.8.0-2-amd64
}
submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option 'gnulinux-advanced-a49dde0e-f2e4-4679-8c56-b9013d7b0fd2' {
menuentry 'Debian GNU/Linux, with Linux 5.8.0-2-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.8.0-2-amd64-advanced-a49dde0e-f2e4-4679-8c56-b9013d7b0fd2' {
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_gpt
insmod ext2
set root='hd0,gpt5'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt5 --hint-efi=hd0,gpt5 --hint-baremetal=ahci0,gpt5 --hint='hd0,gpt5' a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
else
search --no-floppy --fs-uuid --set=root a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
fi
echo 'Loading Linux 5.8.0-2-amd64 ...'
linux /boot/vmlinuz-5.8.0-2-amd64 root=UUID=a49dde0e-f2e4-4679-8c56-b9013d7b0fd2 ro quiet
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-5.8.0-2-amd64
}
menuentry 'Debian GNU/Linux, with Linux 5.8.0-2-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.8.0-2-amd64-recovery-a49dde0e-f2e4-4679-8c56-b9013d7b0fd2' {
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_gpt
insmod ext2
set root='hd0,gpt5'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt5 --hint-efi=hd0,gpt5 --hint-baremetal=ahci0,gpt5 --hint='hd0,gpt5' a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
else
search --no-floppy --fs-uuid --set=root a49dde0e-f2e4-4679-8c56-b9013d7b0fd2
fi
echo 'Loading Linux 5.8.0-2-amd64 ...'
linux /boot/vmlinuz-5.8.0-2-amd64 root=UUID=a49dde0e-f2e4-4679-8c56-b9013d7b0fd2 ro single
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-5.8.0-2-amd64
}
}
### END /etc/grub.d/10_linux ###
### BEGIN /etc/grub.d/20_linux_xen ###
### END /etc/grub.d/20_linux_xen ###
### BEGIN /etc/grub.d/30_os-prober ###
menuentry 'Windows Boot Manager (on /dev/sda2)' --class windows --class os $menuentry_id_option 'osprober-efi-DE31-8EDF' {
insmod part_gpt
insmod fat
set root='hd0,gpt2'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd0,gpt2 --hint-efi=hd0,gpt2 --hint-baremetal=ahci0,gpt2 --hint='hd0,gpt2' DE31-8EDF
else
search --no-floppy --fs-uuid --set=root DE31-8EDF
fi
chainloader /EFI/Microsoft/Boot/bootmgfw.efi
}
### END /etc/grub.d/30_os-prober ###
### BEGIN /etc/grub.d/30_uefi-firmware ###
menuentry 'System setup' $menuentry_id_option 'uefi-firmware' {
fwsetup
}
### END /etc/grub.d/30_uefi-firmware ###
### BEGIN /etc/grub.d/40_custom ###
# This file provides an easy way to add custom menu entries. Simply type the
# menu entries you want to add after this comment. Be careful not to change
# the 'exec tail' line above.
### END /etc/grub.d/40_custom ###
### BEGIN /etc/grub.d/41_custom ###
if [ -f ${config_directory}/custom.cfg ]; then
source ${config_directory}/custom.cfg
elif [ -z "${config_directory}" -a -f $prefix/custom.cfg ]; then
source $prefix/custom.cfg;
fi
### END /etc/grub.d/41_custom ###
*********************** END /boot/grub/grub.cfg
*********************** BEGIN /proc/mdstat
cat: /proc/mdstat: No such file or directory
*********************** END /proc/mdstat
*********************** BEGIN LVM
*********************** END LVM
*********************** BEGIN /dev/disk/by-id
total 0
lrwxrwxrwx 1 root root 9 Mar 8 11:14 ata-MATSHITADVD-RAM_UJ8C2_WP18_009183 -> ../../sr0
lrwxrwxrwx 1 root root 9 Mar 8 11:14 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY -> ../../sda
lrwxrwxrwx 1 root root 10 Mar 8 11:14 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part1 -> ../../sda1
lrwxrwxrwx 1 root root 10 Mar 8 11:15 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part2 -> ../../sda2
lrwxrwxrwx 1 root root 10 Mar 8 11:14 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part3 -> ../../sda3
lrwxrwxrwx 1 root root 10 Mar 8 11:14 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part4 -> ../../sda4
lrwxrwxrwx 1 root root 10 Mar 8 11:14 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part5 -> ../../sda5
lrwxrwxrwx 1 root root 10 Mar 8 11:15 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part6 -> ../../sda6
*********************** END /dev/disk/by-id
*********************** BEGIN /dev/disk/by-uuid
total 0
lrwxrwxrwx 1 root root 10 Mar 8 11:14 141A3D7E1A3D5E44 -> ../../sda4
lrwxrwxrwx 1 root root 9 Mar 8 11:15 2020-11-30-03-01-21-00 -> ../../sr0
lrwxrwxrwx 1 root root 10 Mar 8 11:15 26cd5a33-dd28-4968-b2b4-2d134be2e444 -> ../../sda6
lrwxrwxrwx 1 root root 10 Mar 8 11:14 A65030AD50308659 -> ../../sda1
lrwxrwxrwx 1 root root 10 Mar 8 11:15 DE31-8EDF -> ../../sda2
lrwxrwxrwx 1 root root 10 Mar 8 11:14 a49dde0e-f2e4-4679-8c56-b9013d7b0fd2 -> ../../sda5
*********************** END /dev/disk/by-uuid
-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 5.8.0-2-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages grub-efi-amd64 depends on:
ii debconf [debconf-2.0] 1.5.74
ii grub-common 2.04-16
ii grub-efi-amd64-bin 2.04-16
ii grub2-common 2.04-16
ii ucf 3.0043
grub-efi-amd64 recommends no packages.
grub-efi-amd64 suggests no packages.
-- debconf information:
grub2/kfreebsd_cmdline:
grub2/linux_cmdline_default: quiet
grub2/kfreebsd_cmdline_default: quiet
grub2/linux_cmdline:
grub2/update_nvram: true
grub2/force_efi_extra_removable: false
More information about the Pkg-grub-devel
mailing list