Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1833148 - DNF update which includes grub2-efi leads to a system with unbootable kernel entries including the recovery kernels
Summary: DNF update which includes grub2-efi leads to a system with unbootable kernel ...
Keywords:
Status: CLOSED DUPLICATE of bug 1779611
Alias: None
Product: Fedora
Classification: Fedora
Component: grub2
Version: 32
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Peter Jones
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-05-07 22:06 UTC by Amitosh Swain Mahapatra
Modified: 2020-05-11 12:21 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-05-11 12:21:00 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
hardware info (27.73 KB, text/plain)
2020-05-07 22:06 UTC, Amitosh Swain Mahapatra 		no flags Details
grub2 debug output (197.92 KB, image/jpeg)
2020-05-07 22:12 UTC, Amitosh Swain Mahapatra 		no flags Details
grub2 debug output stuck at loading kerne; (159.14 KB, image/jpeg)
2020-05-07 22:14 UTC, Amitosh Swain Mahapatra 		no flags Details
grub2 debug output loading initrd (189.57 KB, image/jpeg)
2020-05-07 22:15 UTC, Amitosh Swain Mahapatra 		no flags Details
grubx64.efi (1.43 MB, application/x-ms-dos-executable)
2020-05-08 11:56 UTC, Javier Martinez Canillas 		no flags Details
grubx64.efi (1.43 MB, application/x-ms-dos-executable)
2020-05-08 12:29 UTC, Javier Martinez Canillas 		no flags Details
View All

Description Amitosh Swain Mahapatra 2020-05-07 22:06:31 UTC 
Created attachment 1686334 [details]
hardware info

Description of problem:

Running DNF upgrade which included updates "grub2-efi" leads to an unbootable system. None of the grub2 Linux entries work. Not even the recovery kernel.

Trying the standard recovery procedures do not work.

Version-Release number of selected component (if applicable): 2.40-15


How reproducible: Always


Steps to Reproduce:
1. On a fresh install of Fedora 32, run dnf update.
2. This pulls in updates for grub2 from 2.40-12 to 2.40-15.
3. Reboot
3. Try to boot any of the kernel entries in Grub

Actual results:

Booting stops after loading initrd...

Running grub with debug logging stops at handoff to the kernel

Expected results:

The system should boot

Additional info:

dnf undo from a chroot on a live system did not work for me.

Workaround: Boot the system from grub available on live media and downgrade grub to 2.40-12
Comment 1 Amitosh Swain Mahapatra 2020-05-07 22:12:24 UTC 
Created attachment 1686348 [details]
grub2 debug output
Comment 2 Amitosh Swain Mahapatra 2020-05-07 22:14:37 UTC 
Created attachment 1686349 [details]
grub2 debug output stuck at loading kerne;
Comment 3 Amitosh Swain Mahapatra 2020-05-07 22:15:34 UTC 
Created attachment 1686350 [details]
grub2 debug output loading initrd
Comment 4 Javier Martinez Canillas 2020-05-08 11:56:16 UTC 
Created attachment 1686459 [details]
grubx64.efi

Could you please test the attached grub2x64.efi ? It's a test build so you will need to disable Secure Boot.
Comment 5 Javier Martinez Canillas 2020-05-08 12:29:50 UTC 
Created attachment 1686463 [details]
grubx64.efi

And if the previous attached grub2 fails, could you please give test if this one works.
Comment 6 Amitosh Swain Mahapatra 2020-05-08 14:29:43 UTC 
(In reply to Javier Martinez Canillas from comment #4)
> Created attachment 1686459 [details]
> grubx64.efi
> 
> Could you please test the attached grub2x64.efi ? It's a test build so you
> will need to disable Secure Boot.

Updated to 2.40-15 and replaced grub2x64.efi with this file. Systems boots successfully.

The later build also works.
Comment 7 Javier Martinez Canillas 2020-05-08 14:55:22 UTC 
(In reply to Amitosh Swain Mahapatra from comment #6)
> (In reply to Javier Martinez Canillas from comment #4)
> > Created attachment 1686459 [details]
> > grubx64.efi
> > 
> > Could you please test the attached grub2x64.efi ? It's a test build so you
> > will need to disable Secure Boot.
> 
> Updated to 2.40-15 and replaced grub2x64.efi with this file. Systems boots
> successfully.
> 
> The later build also works.

Thanks for testing. And just to confirm, you tested 2.40-15 and the attached grub2x64.efi binaries with the same kernel version?

I'm asking because the first attached binary is the same than 2.40-15, but just a local build.
Comment 8 Amitosh Swain Mahapatra 2020-05-08 15:10:01 UTC 
(In reply to Javier Martinez Canillas from comment #7)
> 
> Thanks for testing. And just to confirm, you tested 2.40-15 and the attached
> grub2x64.efi binaries with the same kernel version?


Yes. I am trying this on kernel 5.6.6, 5.6.8 and 5.6.10. grub2 binary installed from dnf does not work.

Both of the builds provided by you works on each of these kernels.

> 
> I'm asking because the first attached binary is the same than 2.40-15, but
> just a local build.

This is a surprising behavior
Comment 9 Javier Martinez Canillas 2020-05-08 16:00:35 UTC 
(In reply to Amitosh Swain Mahapatra from comment #8)
> (In reply to Javier Martinez Canillas from comment #7)
> > 
> > Thanks for testing. And just to confirm, you tested 2.40-15 and the attached
> > grub2x64.efi binaries with the same kernel version?
> 
> 
> Yes. I am trying this on kernel 5.6.6, 5.6.8 and 5.6.10. grub2 binary
> installed from dnf does not work.
> 
> Both of the builds provided by you works on each of these kernels.
>

Thanks for the confirmation.
 
> > 
> > I'm asking because the first attached binary is the same than 2.40-15, but
> > just a local build.
> 
> This is a surprising behavior

It is indeed, but the same behavior was present in Bug #1779611 and it was reported for other users that also have a Dell Inspiron.

My guess is that you are facing the same problem and this is a duplicate of that bug.
Comment 10 Amitosh Swain Mahapatra 2020-05-08 17:43:01 UTC 
(In reply to Javier Martinez Canillas from comment #9)
> 
> It is indeed, but the same behavior was present in Bug #1779611 and it was
> reported for other users that also have a Dell Inspiron.
> 
> My guess is that you are facing the same problem and this is a duplicate of
> that bug.

Yes, it looks like the same issue as disabling TPM works in my case as well. However, I did not have the issues on earlier versions of grub, as described in the other issue.

Disabling TPM, however, is not an option as it doesn't allow me to access encrypted disks on my Windows partition.

I think this problem only happens when we try to load grub signed with an official secure-boot key.

There are reports in other distros as well: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1848892 which point towards disabling secure-boot bits in grub even though secure  boot is disabled in BIOS, I could not find a way to reinstall grub bits without secure-boot stuff in Fedora though
Comment 11 Javier Martinez Canillas 2020-05-11 12:21:00 UTC 
(In reply to Amitosh Swain Mahapatra from comment #10)
> (In reply to Javier Martinez Canillas from comment #9)
> > 
> > It is indeed, but the same behavior was present in Bug #1779611 and it was
> > reported for other users that also have a Dell Inspiron.
> > 
> > My guess is that you are facing the same problem and this is a duplicate of
> > that bug.
> 
> Yes, it looks like the same issue as disabling TPM works in my case as well.
> However, I did not have the issues on earlier versions of grub, as described
> in the other issue.
> 
> Disabling TPM, however, is not an option as it doesn't allow me to access
> encrypted disks on my Windows partition.
>

Right, I forgot to mention disabling the TPM. Then definitely is the same issue. I'll close this as a duplicate.

> I think this problem only happens when we try to load grub signed with an
> official secure-boot key.
> 
> There are reports in other distros as well:
> https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1848892 which point
> towards disabling secure-boot bits in grub even though secure  boot is
> disabled in BIOS, I could not find a way to reinstall grub bits without
> secure-boot stuff in Fedora though

That seems to be a different issue, is about measuring data in GRUB failing and that preventing the kernel to be loaded.

*** This bug has been marked as a duplicate of bug 1779611 ***
Note You need to log in before you can comment on or make changes to this bug.