#995155 shim-signed: fwupd updates fail (fixed in Ubuntu?)

Package:
shim-signed
Source:
shim-signed
Description:
Secure Boot chain-loading bootloader (Microsoft-signed binary)
Submitter:
David Love
Date:
2023-08-04 10:21:03 UTC
Severity:
normal
#995155#5
Date:
2021-09-27 08:49:56 UTC
From:
To:
The current shim fails to run what's necessary to update firmware via
fwupd.  Could it be updated like Ubuntu, which has apparently fixed it?
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1929471
#995155#10
Date:
2023-01-09 17:20:03 UTC
From:
To:
i believe this has been fixed in the upstream shim-15.7 release:
https://github.com/rhboot/shim/commit/4d64389c6c941d21548b06423b8131c872e3c3c7
#995155#15
Date:
2023-02-05 03:01:03 UTC
From:
To:
I can confirm that building 15.7 from the debian git, using it to boot
(with secure boot off) with the right EFI entry results in the update
going through:

sudo apt-get build-dep shim

sudo apt-get install libefivar-dev # New dependency that apt won't be
aware of yet

git clone https://salsa.debian.org/efi-team/shim.git

dpkg-buildpackage -uc -b

sudo dpkg -i ../shim-unsigned_15.7-1~deb11u1_amd64.deb

sudo mv /boot/efi/EFI/debian/shimx64.efi
/boot/efi/EFI/debian/shimx64-154.efi

sudo cp /usr/lib/shim/shimx64.efi /boot/efi/EFI/debian/shimx64.efi
#995155#20
Date:
2023-08-04 10:17:20 UTC
From:
To:
Hi David,

I believe this to be fixed when we moved to using shim 15.7, so
marking it as such. Please re-open if you still have problems.