Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)
Eddy Petrișor
eddy.petrisor at gmail.com
Mon Sep 6 08:00:42 BST 2021
package grub-efi-amd64
found 984760 2.02+dfsg1-20+deb10u4
thanks
Hello,
I also had this issue when upgrading from stretch to buster.
For me the BIOS allowed be to select the EFI image to boot, so I was
able to boot into the system that way, then the fix was to:
1) run again update-grub2 and
2) dpkg-reconfigure -plow grub-efi-amd64
After this the old FreeDOS images (HP diagnostics and FreeDOS) I have
were no longer booting via grub, but I kept them just in case and I
still can boot them via direct EFI image selection from BIOS.
Some info on my system:
eddy at aptonia:~ $ ll /dev/disk/by-id/
total 0
lrwxrwxrwx 1 root root 10 sep 2 14:44 dm-name-nmve-home -> ../../dm-1
lrwxrwxrwx 1 root root 10 sep 2 14:44 dm-name-nmve-lvcrypt -> ../../dm-3
lrwxrwxrwx 1 root root 10 sep 2 14:44 dm-name-nmve-root -> ../../dm-0
lrwxrwxrwx 1 root root 10 sep 2 14:44 dm-name-nmve-swap -> ../../dm-2
lrwxrwxrwx 1 root root 10 sep 2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3TCeJFI4DcmZKcD7dPi6cIdHpueQNgBHPY
-> ../../dm-3
lrwxrwxrwx 1 root root 10 sep 2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3TgemRtgdFDbSpUbPwRC2XuZlz0qd2TAe6
-> ../../dm-1
lrwxrwxrwx 1 root root 10 sep 2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3Thu3VxxfPFVJ2y1xVoBWopwxAdqh3RMNv
-> ../../dm-2
lrwxrwxrwx 1 root root 10 sep 2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3TLNIBeUak8X026nSToUE5QcrOpTfiuJfM
-> ../../dm-0
lrwxrwxrwx 1 root root 15 sep 2 14:44
lvm-pv-uuid-ZkjWrn-o4q3-wkB8-kvLh-k0L1-jRsM-9Wj11m -> ../../nvme0n1p5
lrwxrwxrwx 1 root root 13 sep 2 14:44 nvme-eui.ace42e008509e89f ->
../../nvme0n1
lrwxrwxrwx 1 root root 15 sep 2 14:44 nvme-eui.ace42e008509e89f-part1
-> ../../nvme0n1p1
lrwxrwxrwx 1 root root 15 sep 2 14:44 nvme-eui.ace42e008509e89f-part2
-> ../../nvme0n1p2
lrwxrwxrwx 1 root root 15 sep 2 14:44 nvme-eui.ace42e008509e89f-part3
-> ../../nvme0n1p3
lrwxrwxrwx 1 root root 15 sep 2 14:44 nvme-eui.ace42e008509e89f-part5
-> ../../nvme0n1p5
lrwxrwxrwx 1 root root 13 sep 2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L ->
../../nvme0n1
lrwxrwxrwx 1 root root 15 sep 2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part1 ->
../../nvme0n1p1
lrwxrwxrwx 1 root root 15 sep 2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part2 ->
../../nvme0n1p2
lrwxrwxrwx 1 root root 15 sep 2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part3 ->
../../nvme0n1p3
lrwxrwxrwx 1 root root 15 sep 2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part5 ->
../../nvme0n1p5
eddy at aptonia:~ $ ll /dev/disk/by-uuid/
total 0
lrwxrwxrwx 1 root root 10 sep 2 14:44
2615ddb7-eab6-428c-9291-c3245b41c1f3 -> ../../dm-2
lrwxrwxrwx 1 root root 15 sep 2 14:44 2C53-59FF -> ../../nvme0n1p2
lrwxrwxrwx 1 root root 10 sep 2 14:44
53ff31db-a553-42be-85ab-720ffcb070a7 -> ../../dm-0
lrwxrwxrwx 1 root root 10 sep 2 14:44
61f9b8c2-bc4d-46e4-8a2c-b1e443a54f48 -> ../../dm-3
lrwxrwxrwx 1 root root 15 sep 2 14:44 6A53-125B -> ../../nvme0n1p1
lrwxrwxrwx 1 root root 10 sep 2 14:44
714a3bfa-0c2e-4bb1-a800-407ed7bf0556 -> ../../dm-1
eddy at aptonia:~ $ cat /proc/mdstat
cat: /proc/mdstat: No such file or directory
eddy at aptonia:~ $ dpkg -l | grep grub-efi-amd64
ii grub-efi-amd64 2.02+dfsg1-20+deb10u4
amd64 GRand Unified Bootloader, version 2 (EFI-AMD64
version)
ii grub-efi-amd64-bin 2.02+dfsg1-20+deb10u4
amd64 GRand Unified Bootloader, version 2 (EFI-AMD64
modules)
ii grub-efi-amd64-signed 1+2.02+dfsg1+20+deb10u4
amd64 GRand Unified Bootloader, version 2 (amd64
UEFI signed by Debian)
eddy at aptonia:~ $ cat /boot/grub/grub.cfg
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#
### BEGIN /etc/grub.d/00_header ###
if [ -s $prefix/grubenv ]; then
set have_grubenv=true
load_env
fi
if [ "${next_entry}" ] ; then
set default="${next_entry}"
set next_entry=
save_env next_entry
set boot_once=true
else
set default="0"
fi
if [ x"${feature_menuentry_id}" = xy ]; then
menuentry_id_option="--id"
else
menuentry_id_option=""
fi
export menuentry_id_option
if [ "${prev_saved_entry}" ]; then
set saved_entry="${prev_saved_entry}"
save_env saved_entry
set prev_saved_entry=
save_env prev_saved_entry
set boot_once=true
fi
function savedefault {
if [ -z "${boot_once}" ]; then
saved_entry="${chosen}"
save_env saved_entry
fi
}
function load_video {
if [ x$feature_all_video_module = xy ]; then
insmod all_video
else
insmod efi_gop
insmod efi_uga
insmod ieee1275_fb
insmod vbe
insmod vga
insmod video_bochs
insmod video_cirrus
fi
}
if [ x$feature_default_font_path = xy ] ; then
font=unicode
else
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root 53ff31db-a553-42be-85ab-720ffcb070a7
fi
font="/usr/share/grub/unicode.pf2"
fi
if loadfont $font ; then
set gfxmode=auto
load_video
insmod gfxterm
set locale_dir=$prefix/locale
set lang=ro_RO
insmod gettext
fi
terminal_output gfxterm
if [ "${recordfail}" = 1 ] ; then
set timeout=30
else
if [ x$feature_timeout_style = xy ] ; then
set timeout_style=menu
set timeout=5
# Fallback normal timeout code in case the timeout_style feature is
# unavailable.
else
set timeout=5
fi
fi
### END /etc/grub.d/00_header ###
### BEGIN /etc/grub.d/05_debian_theme ###
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root 53ff31db-a553-42be-85ab-720ffcb070a7
fi
insmod png
if background_image
/usr/share/desktop-base/futureprototype-theme/grub/grub-16x9.png; then
set color_normal=white/black
set color_highlight=black/white
else
set menu_color_normal=cyan/blue
set menu_color_highlight=white/blue
fi
### END /etc/grub.d/05_debian_theme ###
### BEGIN /etc/grub.d/10_linux ###
function gfxmode {
set gfxpayload="${1}"
}
set linux_gfx_mode=
export linux_gfx_mode
menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class
gnu --class os $menuentry_id_option
'gnulinux-simple-53ff31db-a553-42be-85ab-720ffcb070a7' {
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 5.10.0-0.bpo.8-amd64 ...'
linux /boot/vmlinuz-5.10.0-0.bpo.8-amd64
root=/dev/mapper/nmve-root ro quiet
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-5.10.0-0.bpo.8-amd64
}
submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option
'gnulinux-advanced-53ff31db-a553-42be-85ab-720ffcb070a7' {
menuentry 'Debian GNU/Linux, with Linux 5.10.0-0.bpo.8-amd64'
--class debian --class gnu-linux --class gnu --class os
$menuentry_id_option
'gnulinux-5.10.0-0.bpo.8-amd64-advanced-53ff31db-a553-42be-85ab-720ffcb070a7'
{
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 5.10.0-0.bpo.8-amd64 ...'
linux /boot/vmlinuz-5.10.0-0.bpo.8-amd64
root=/dev/mapper/nmve-root ro quiet
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-5.10.0-0.bpo.8-amd64
}
menuentry 'Debian GNU/Linux, with Linux 5.10.0-0.bpo.8-amd64
(recovery mode)' --class debian --class gnu-linux --class gnu --class
os $menuentry_id_option
'gnulinux-5.10.0-0.bpo.8-amd64-recovery-53ff31db-a553-42be-85ab-720ffcb070a7'
{
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 5.10.0-0.bpo.8-amd64 ...'
linux /boot/vmlinuz-5.10.0-0.bpo.8-amd64
root=/dev/mapper/nmve-root ro single
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-5.10.0-0.bpo.8-amd64
}
menuentry 'Debian GNU/Linux, with Linux 4.19.0-17-amd64' --class
debian --class gnu-linux --class gnu --class os $menuentry_id_option
'gnulinux-4.19.0-17-amd64-advanced-53ff31db-a553-42be-85ab-720ffcb070a7'
{
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 4.19.0-17-amd64 ...'
linux /boot/vmlinuz-4.19.0-17-amd64
root=/dev/mapper/nmve-root ro quiet
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-4.19.0-17-amd64
}
menuentry 'Debian GNU/Linux, with Linux 4.19.0-17-amd64 (recovery
mode)' --class debian --class gnu-linux --class gnu --class os
$menuentry_id_option
'gnulinux-4.19.0-17-amd64-recovery-53ff31db-a553-42be-85ab-720ffcb070a7'
{
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 4.19.0-17-amd64 ...'
linux /boot/vmlinuz-4.19.0-17-amd64
root=/dev/mapper/nmve-root ro single
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-4.19.0-17-amd64
}
menuentry 'Debian GNU/Linux, with Linux 4.9.0-16-amd64' --class
debian --class gnu-linux --class gnu --class os $menuentry_id_option
'gnulinux-4.9.0-16-amd64-advanced-53ff31db-a553-42be-85ab-720ffcb070a7'
{
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 4.9.0-16-amd64 ...'
linux /boot/vmlinuz-4.9.0-16-amd64
root=/dev/mapper/nmve-root ro quiet
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-4.9.0-16-amd64
}
menuentry 'Debian GNU/Linux, with Linux 4.9.0-16-amd64 (recovery
mode)' --class debian --class gnu-linux --class gnu --class os
$menuentry_id_option
'gnulinux-4.9.0-16-amd64-recovery-53ff31db-a553-42be-85ab-720ffcb070a7'
{
load_video
insmod gzio
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod lvm
insmod ext2
set root='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root
--hint='lvmid/dszzt4-JF4q-Orlc-ZdVI-M8pF-8M4c-wQBR3T/LNIBeU-ak8X-026n-SToU-E5Qc-rOpT-fiuJfM'
53ff31db-a553-42be-85ab-720ffcb070a7
else
search --no-floppy --fs-uuid --set=root
53ff31db-a553-42be-85ab-720ffcb070a7
fi
echo 'Loading Linux 4.9.0-16-amd64 ...'
linux /boot/vmlinuz-4.9.0-16-amd64
root=/dev/mapper/nmve-root ro single
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-4.9.0-16-amd64
}
}
### END /etc/grub.d/10_linux ###
### BEGIN /etc/grub.d/20_linux_xen ###
### END /etc/grub.d/20_linux_xen ###
### BEGIN /etc/grub.d/30_os-prober ###
menuentry 'FreeDOS (on /dev/nvme0n1p1)' --class freedos --class os
$menuentry_id_option 'osprober-chain-6A53-125B' {
insmod part_msdos
insmod fat
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root 6A53-125B
else
search --no-floppy --fs-uuid --set=root 6A53-125B
fi
parttool ${root} hidden-
drivemap -s (hd0) ${root}
chainloader +1
}
menuentry 'FreeDOS (on /dev/nvme0n1p2)' --class freedos --class os
$menuentry_id_option 'osprober-chain-2C53-59FF' {
insmod part_msdos
insmod fat
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root 2C53-59FF
else
search --no-floppy --fs-uuid --set=root 2C53-59FF
fi
parttool ${root} hidden-
drivemap -s (hd0) ${root}
chainloader +1
}
### END /etc/grub.d/30_os-prober ###
### BEGIN /etc/grub.d/30_uefi-firmware ###
menuentry 'System setup' $menuentry_id_option 'uefi-firmware' {
fwsetup
}
### END /etc/grub.d/30_uefi-firmware ###
### BEGIN /etc/grub.d/40_custom ###
# This file provides an easy way to add custom menu entries. Simply type the
# menu entries you want to add after this comment. Be careful not to change
# the 'exec tail' line above.
### END /etc/grub.d/40_custom ###
### BEGIN /etc/grub.d/41_custom ###
if [ -f ${config_directory}/custom.cfg ]; then
source ${config_directory}/custom.cfg
elif [ -z "${config_directory}" -a -f $prefix/custom.cfg ]; then
source $prefix/custom.cfg;
fi
### END /etc/grub.d/41_custom ###
More information about the Pkg-grub-devel
mailing list