Bug#1127652: grub-efi-amd64-signed: Booting grub is impossible on 2.14 version with "failed to install protocols" and "cannot load image" errors

Mate Kukri mate.kukri at canonical.com
Wed Feb 11 10:17:04 GMT 2026


Hello,

Can you provide more information about the system this runs on?

Additionally what image was this installation derived from? And how
did you install the GRUB2 binary?

On Wed, Feb 11, 2026 at 7:33 AM Huey Chen <horsey_guy at proton.me> wrote:
>
> Package: grub-efi-amd64-unsigned
> Version: 1+2.12+9
> Severity: important
> X-Debbugs-Cc: horsey_guy at proton.me
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Dear Maintainer,
>
> I have upgraded to 2.14 on Experimental, but booting does not work at all. Errors such as:
> ```
> error: ../../../grub-core/loader/efi/linux.c:437:failed to install protocols
> ```
> and
> ```
> error: ../../../grub-core/loader/efi/linux.c:227:cannot load image
> ```
> occur, and these prevent any progression. I since then have downgraded to 2.12.9 on Trixie, which fixes the issue.
>
> I wonder if this affects others who upgraded to 2.14.
>
> One thing I need to mention is that I installed the 2.14 version to test out the argon2id addition and switched the key to argon2id with `cryptsetup luksConvertKey`. Before the downgrade, I switched back to the old pbkdf2.
>
> - -- System Information:
> Debian Release: forky/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 6.19-amd64 (SMP w/12 CPU threads; PREEMPT)
> Kernel taint flags: TAINT_USER
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages grub-efi-amd64-signed depends on:
> ii  grub-common  2.12-9
>
> Versions of packages grub-efi-amd64-signed recommends:
> ii  shim-signed  1.47+15.8-1
>
> grub-efi-amd64-signed suggests no packages.
>
> Versions of packages grub-efi-amd64-unsigned depends on:
> ii  grub-common  2.12-9
>
> - -- no debconf information
>
> -----BEGIN PGP SIGNATURE-----
>
> iHUEARYKAB0WIQTsigbt7ZnibbpjLSwmygukCVXDVgUCaYwwMwAKCRAmygukCVXD
> VoqSAQD0+PeYSPpGYq9IYzG2Ow6VMx/VMz6xBOxgV6R2cPmSnQD+NtEVs2B6XIEh
> M/YI8C4voUl1KDptXM0/+bbQKnJubgs=
> =9A5e
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Pkg-grub-devel mailing list
> Pkg-grub-devel at alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-grub-devel



More information about the Pkg-grub-devel mailing list