Package: grub-efi-amd64-bin X-Debbugs-Cc: [email protected] Version: 2.14-3 Severity: important
This bug has become visible after upgrading the grub2 packages from 2.14-2 to 2.14-3. After reverting commit: https://salsa.debian.org/grub-team/grub/-/commit/8719ef8a523f2a89aeff1b86f5e14c3bba7a7d11 or downgrading back to grub2 2.14-2 I'm able to boot again. -- Secure boot settings: [I] root@debian ~> mokutil --sb-state SecureBoot enabled SecureBoot validation is disabled in shim [I] root@debian ~> efibootmgr -v | head -5 BootCurrent: 0000 Timeout: 0 seconds BootOrder: 0000,0001,001C,001E,001D,001A,001B,001F,0020,0021,0022,0002 Boot0000* debian HD(1,GPT,9bbbc952-a90f-4ffb-9da8-6fe2db91a9ff,0x800,0x100000)/\EFI\debian\shimx64.efi dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 00 10 00 00 00 00 00 52 c9 bb 9b 0f a9 fb 4f 9d a8 6f e2 db 91 a9 ff 02 02 / 04 04 34 00 5c 00 45 00 46 00 49 00 5c 00 64 00 65 00 62 00 69 00 61 00 6e 00 5c 00 73 00 68 00 69 00 6d 00 78 00 36 00 34 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00 [I] root@debian ~> -- Package-specific info: *********************** BEGIN /proc/mounts /dev/mapper/vg00-root / btrfs rw,seclabel,relatime,ssd,discard=async,space_cache=v2,commit=360,subvolid=256,subvol=/@rootfs 0 0 /dev/nvme0n1p2 /boot ext2 rw,seclabel,relatime 0 0 /dev/nvme0n1p1 /boot/efi vfat rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro 0 0 /dev/mapper/vg00-home /home btrfs rw,seclabel,relatime,ssd,discard=async,space_cache=v2,commit=360,subvolid=5,subvol=/ 0 0 *********************** END /proc/mounts *********************** BEGIN /boot/grub/grub.cfg # # DO NOT EDIT THIS FILE # # It is automatically generated by grub-mkconfig using templates # from /etc/grub.d and settings from /etc/default/grub # ### BEGIN /etc/grub.d/00_header ### if [ -s $prefix/grubenv ]; then set have_grubenv=true load_env fi if [ "${env_block}" ] ; then set env_block="(${root})${env_block}" export env_block load_env -f "${env_block}" fi if [ "${next_entry}" ] ; then set default="${next_entry}" set next_entry= if [ "${env_block}" ] ; then save_env -f "${env_block}" next_entry else save_env next_entry fi set boot_once=true else set default="0" fi if [ x"${feature_menuentry_id}" = xy ]; then menuentry_id_option="--id" else menuentry_id_option="" fi export menuentry_id_option if [ "${prev_saved_entry}" ]; then set saved_entry="${prev_saved_entry}" save_env saved_entry set prev_saved_entry= save_env prev_saved_entry set boot_once=true fi function savedefault { if [ -z "${boot_once}" ]; then saved_entry="${chosen}" if [ "${env_block}" ] ; then save_env -f "${env_block}" saved_entry else save_env saved_entry fi fi } function load_video { if [ x$grub_platform = xefi ]; then insmod efi_gop elif [ x$feature_all_video_module = xy ]; then insmod all_video else insmod efi_gop insmod ieee1275_fb insmod vbe insmod vga insmod video_bochs insmod video_cirrus fi } if [ x$feature_default_font_path = xy ] ; then font=unicode else insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root cb70ed6c-cfc0-47f8-a55e-467aa5e4336c font="/grub/unicode.pf2" fi if loadfont $font ; then set gfxmode=auto load_video insmod gfxterm set locale_dir=$prefix/locale set lang=en_GB insmod gettext fi terminal_output gfxterm if [ "${recordfail}" = 1 ] ; then set timeout=30 else if [ x$feature_timeout_style = xy ] ; then set timeout_style=menu set timeout=5 # Fallback normal timeout code in case the timeout_style feature is # unavailable. else set timeout=5 fi fi ### END /etc/grub.d/00_header ### ### BEGIN /etc/grub.d/05_debian_theme ### set menu_color_normal=cyan/blue set menu_color_highlight=white/blue ### END /etc/grub.d/05_debian_theme ### ### BEGIN /etc/grub.d/10_linux ### set linux_gfx_mode= export linux_gfx_mode menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-cb3982ad-96e8-4ab6-a3dd-3164301aecd2' { load_video insmod gzio if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root cb70ed6c-cfc0-47f8-a55e-467aa5e4336c echo 'Loading Linux 7.0.13+deb14-amd64 ...' linux /vmlinuz-7.0.13+deb14-amd64 root=/dev/mapper/vg00-root ro rootflags=subvol=@rootfs mitigations=off intel_iommu=sm_on iommu.passthrough=1 i915.enable_guc=3 pcie_acs_override=downstream,multifunction net.ifnames=0 security=selinux enforcing=1 quiet echo 'Loading initial ramdisk ...' initrd /initrd.img-7.0.13+deb14-amd64 } submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option 'gnulinux-advanced-cb3982ad-96e8-4ab6-a3dd-3164301aecd2' { menuentry 'Debian GNU/Linux, with Linux 7.0.13+deb14-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-7.0.13+deb14-amd64-advanced-cb3982ad-96e8-4ab6-a3dd-3164301aecd2' { load_video insmod gzio if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root cb70ed6c-cfc0-47f8-a55e-467aa5e4336c echo 'Loading Linux 7.0.13+deb14-amd64 ...' linux /vmlinuz-7.0.13+deb14-amd64 root=/dev/mapper/vg00-root ro rootflags=subvol=@rootfs mitigations=off intel_iommu=sm_on iommu.passthrough=1 i915.enable_guc=3 pcie_acs_override=downstream,multifunction net.ifnames=0 security=selinux enforcing=1 quiet echo 'Loading initial ramdisk ...' initrd /initrd.img-7.0.13+deb14-amd64 } menuentry 'Debian GNU/Linux, with Linux 7.0.13+deb14-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-7.0.13+deb14-amd64-recovery-cb3982ad-96e8-4ab6-a3dd-3164301aecd2' { load_video insmod gzio if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root cb70ed6c-cfc0-47f8-a55e-467aa5e4336c echo 'Loading Linux 7.0.13+deb14-amd64 ...' linux /vmlinuz-7.0.13+deb14-amd64 root=/dev/mapper/vg00-root ro single dis_ucode_ldr rootflags=subvol=@rootfs mitigations=off intel_iommu=sm_on iommu.passthrough=1 i915.enable_guc=3 pcie_acs_override=downstream,multifunction net.ifnames=0 security=selinux enforcing=1 quiet echo 'Loading initial ramdisk ...' initrd /initrd.img-7.0.13+deb14-amd64 } menuentry 'Debian GNU/Linux, with Linux 7.0.12+deb14.1-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-7.0.12+deb14.1-amd64-advanced-cb3982ad-96e8-4ab6-a3dd-3164301aecd2' { load_video insmod gzio if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root cb70ed6c-cfc0-47f8-a55e-467aa5e4336c echo 'Loading Linux 7.0.12+deb14.1-amd64 ...' linux /vmlinuz-7.0.12+deb14.1-amd64 root=/dev/mapper/vg00-root ro rootflags=subvol=@rootfs mitigations=off intel_iommu=sm_on iommu.passthrough=1 i915.enable_guc=3 pcie_acs_override=downstream,multifunction net.ifnames=0 security=selinux enforcing=1 quiet echo 'Loading initial ramdisk ...' initrd /initrd.img-7.0.12+deb14.1-amd64 } menuentry 'Debian GNU/Linux, with Linux 7.0.12+deb14.1-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-7.0.12+deb14.1-amd64-recovery-cb3982ad-96e8-4ab6-a3dd-3164301aecd2' { load_video insmod gzio if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root cb70ed6c-cfc0-47f8-a55e-467aa5e4336c echo 'Loading Linux 7.0.12+deb14.1-amd64 ...' linux /vmlinuz-7.0.12+deb14.1-amd64 root=/dev/mapper/vg00-root ro single dis_ucode_ldr rootflags=subvol=@rootfs mitigations=off intel_iommu=sm_on iommu.passthrough=1 i915.enable_guc=3 pcie_acs_override=downstream,multifunction net.ifnames=0 security=selinux enforcing=1 quiet echo 'Loading initial ramdisk ...' initrd /initrd.img-7.0.12+deb14.1-amd64 } } ### END /etc/grub.d/10_linux ### ### BEGIN /etc/grub.d/20_linux_xen ### ### END /etc/grub.d/20_linux_xen ### ### BEGIN /etc/grub.d/25_bli ### if [ "$grub_platform" = "efi" ]; then insmod bli fi ### END /etc/grub.d/25_bli ### ### BEGIN /etc/grub.d/30_os-prober ### ### END /etc/grub.d/30_os-prober ### ### BEGIN /etc/grub.d/30_uefi-firmware ### if [ "$grub_platform" = "efi" ]; then fwsetup --is-supported if [ "$?" = 0 ]; then menuentry 'UEFI Firmware Settings' $menuentry_id_option 'uefi-firmware' { fwsetup } fi fi ### END /etc/grub.d/30_uefi-firmware ### ### BEGIN /etc/grub.d/35_fwupd ### ### END /etc/grub.d/35_fwupd ### ### BEGIN /etc/grub.d/40_custom ### # This file provides an easy way to add custom menu entries. Simply type the # menu entries you want to add after this comment. Be careful not to change # the 'exec tail' line above. ### END /etc/grub.d/40_custom ### ### BEGIN /etc/grub.d/41_custom ### if [ -f ${config_directory}/custom.cfg ]; then source ${config_directory}/custom.cfg elif [ -z "${config_directory}" -a -f $prefix/custom.cfg ]; then source $prefix/custom.cfg fi ### END /etc/grub.d/41_custom ### *********************** END /boot/grub/grub.cfg *********************** BEGIN /proc/mdstat cat: /proc/mdstat: No such file or directory *********************** END /proc/mdstat *********************** BEGIN LVM *********************** END LVM *********************** BEGIN /dev/disk/by-id total 0 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-name-nvme0n1p3_crypt -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-name-vg00-home -> ../../dm-3 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-name-vg00-root -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-name-vg00-swap -> ../../dm-2 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-uuid-CRYPT-LUKS2-1c144c57ed9f4c07b74d9a5d4c5ae3ea-nvme0n1p3_crypt -> ../../dm-0 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-uuid-LVM-7ydvGonfsGaBfTLf5hMUGfYL1XVsrO0z0MC5vpkNKsBQ7fWkWzm2aRdQOAFJVgWF -> ../../dm-3 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-uuid-LVM-7ydvGonfsGaBfTLf5hMUGfYL1XVsrO0zIBdxzTCtBsHxs30CDBRxhTT6AmqiydA8 -> ../../dm-2 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 dm-uuid-LVM-7ydvGonfsGaBfTLf5hMUGfYL1XVsrO0zqjrAGAYwV1xJYAjVSBhz3zVxvh48ULVQ -> ../../dm-1 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 lvm-pv-uuid-TYsizV-hgfP-AzRC-b352-bq3E-dM7h-luqx4W -> ../../dm-0 lrwxrwxrwx. 1 root root 13 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K -> ../../nvme0n1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K-part2 -> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 13 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K_1 -> ../../nvme0n1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K_1-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K_1-part2 -> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-SKHynix_HFS512GDE9X081N_FJA8N47291250885K_1-part3 -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 13 Jun 28 10:26 nvme-nvme.1c5c-464a41384e34373239313235303838354b-534b48796e69785f48465335313247444539583038314e-00000001 -> ../../nvme0n1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-nvme.1c5c-464a41384e34373239313235303838354b-534b48796e69785f48465335313247444539583038314e-00000001-part1 -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-nvme.1c5c-464a41384e34373239313235303838354b-534b48796e69785f48465335313247444539583038314e-00000001-part2 -> ../../nvme0n1p2 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 nvme-nvme.1c5c-464a41384e34373239313235303838354b-534b48796e69785f48465335313247444539583038314e-00000001-part3 -> ../../nvme0n1p3 *********************** END /dev/disk/by-id *********************** BEGIN /dev/disk/by-uuid total 0 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 1c144c57-ed9f-4c07-b74d-9a5d4c5ae3ea -> ../../nvme0n1p3 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 5faaec0f-9251-48b7-adcd-028189b74731 -> ../../dm-2 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 E0BC-FFBD -> ../../nvme0n1p1 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 ae89ac9a-3fff-47a8-8add-97d0a5ba783d -> ../../dm-3 lrwxrwxrwx. 1 root root 10 Jun 28 10:26 cb3982ad-96e8-4ab6-a3dd-3164301aecd2 -> ../../dm-1 lrwxrwxrwx. 1 root root 15 Jun 28 10:26 cb70ed6c-cfc0-47f8-a55e-467aa5e4336c -> ../../nvme0n1p2 *********************** END /dev/disk/by-uuid -- System Information: Debian Release: forky/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 7.0.13+deb14-amd64 (SMP w/8 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_USER, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: SELinux: enabled - Mode: Permissive - Policy name: default Versions of packages grub-efi-amd64-bin depends on: ii grub-efi-amd64-unsigned 2.14-3 ii grub2-common 2.14-3 Versions of packages grub-efi-amd64-bin recommends: ii efibootmgr 18-4.1 ii grub-efi-amd64-signed 1+2.14+3 grub-efi-amd64-bin suggests no packages. -- no debconf information
