Bug 948866

Summary: shim-install is broken in 20151002 Tumbleweed release
Product: [openSUSE] openSUSE Tumbleweed Reporter: Neil Rickert <nwr10cst-oslnx>
Component: BootloaderAssignee: Gary Ching-Pang Lin <glin>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Normal    
Priority: P5 - None CC: behlert, jsrain, mchang, paka
Version: Current   
Target Milestone: ---   
Hardware: x86-64   
OS: SUSE Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Neil Rickert 2015-10-05 16:03:58 UTC
User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0
Build Identifier: 

I updated Tumbleweed to 20151002.

First system - grub distributor = "betasuse".  This went fine.

Second system (different partition on same box) - grub-distributor is empty.

It looks as if grub2-install did write the update to "/boot/efi/EFI/opensuse" as expected.

However, it looks as if shim-install wrote its update to "/boot/efi/EFI/grub" which was not expected.  It seems that shim-install doesn't know the new rules about empty distributor field.

Reproducible: Didn't try
Comment 2 Gary Ching-Pang Lin 2015-10-06 06:42:08 UTC
Michael, would you mind to check if this is a duplicate of bsc#942519?
Comment 3 Michael Chang 2015-10-06 07:28:26 UTC
Hi Neil, Gary,

Yes, it is. And just heard from Gary that the shim package update containing the fix in oS Factory is being blocked with waiting for Microsoft's new signature update. :(
Comment 4 Gary Ching-Pang Lin 2015-10-08 08:46:03 UTC
FYI,

The new shim signature was submitted and was expected to be checked in to factory in a few days. The patch for shim-install will be there along with the update.
Comment 5 Gary Ching-Pang Lin 2015-10-12 02:13:59 UTC
Shim 0.9 was checked into factory. Feel free to reopen this bug if it happens again.
Comment 6 patrick shanahan 2015-11-26 13:42:10 UTC
openSUSE Tumbleweed, currently 20151123
shim-0.9-3.26.x86_64

My Acer Aspire 5 with efi boot still gets a third empty entry:
  opensuse-secureboot
And fail to boot w/o selecting either of the other menu entries:
  grub-secureboot
  windows boot manager

I have removed the empty menu item, opensuse-secureboot, but
updated shim packages restore the empty item.
Comment 7 Neil Rickert 2015-11-26 15:03:52 UTC
Responding to Patrick at c#6

This bug really is fixed.  But you are still having problems due to
bug 950569 .  The fix for bug 950569 is known, but apparently still needs
a Microsoft signature before it can be released.  After that is done,
your boot entry for "opensuse-secureboot" should start working, and you
can then delete "grub-secureboot".
Comment 8 Gary Ching-Pang Lin 2015-12-16 03:42:13 UTC
The updated shim shall already include the fix. Close this bug.