Package: fwupd Version: 2.0.20-1~bpo13+1 Severity: important X-Debbugs-Cc: [email protected]
Dear Maintainer, I am trying to update the firmware on my Lenovo X280. It errors as follows: ``` $ fwupdmgr update ╔══════════════════════════════════════════════════════════════════════════════╗ ║ Upgrade System Firmware from 0.1.57 to 0.1.59? ║ ╠══════════════════════════════════════════════════════════════════════════════╣ ║ Lenovo System Firmware Version 1.59 ║ ║ ║ ║ Important updates ║ ║ ║ ║ • Enhancement to address security vulnerabilities ║ ║ ║ ║ 20KES03000 must remain plugged into a power source for the duration of the ║ ║ update to avoid damage. ║ ╚══════════════════════════════════════════════════════════════════════════════╝ Perform operation? [Y|n]: y Scheduling… [ ] failed to write-firmware: Secure boot is enabled, but shim isn't installed to EFI/debian/shimx64.efi ``` Yes, shim isn't installed, on purpose as I'm using my own Secure Boot keys/certs. But I don't see how shim should be involved in an EFI capsule-based BIOS update. Note that fwupdmgr managed to at least write the capsule to the ESP: ``` $ sudo tree /boot/efi/EFI/systemd/fw /boot/efi/EFI/systemd/fw ├── fwupd-3b8c8162-188c-46a4-aec9-be43f1d65697.cap └── fwupd-508f7539-1ad6-48b9-8680-38377535009d.cap 1 directory, 2 files ``` I'd expect some success message and a prompt to reboot my machine, so that the UEFI BIOS can update the BIOS. I have installed fwupd 2.0.20-1~bpo13+1 from trixie-backports as I was told in #1112464 that the issue should be fixed there. It isn't. I was told to open a new issue about it. Cheers, Andreas -- System Information: Debian Release: 13.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.12.94+deb13-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages fwupd depends on: ii libarchive13t64 3.7.4-4+deb13u1 ii libblkid1 2.41-5 ii libc6 2.41-12+deb13u3 ii libcbor0.10 0.10.2-2 ii libcurl3t64-gnutls 8.14.1-2+deb13u3 ii libdrm-amdgpu1 2.4.124-2 ii libdrm2 2.4.124-2 ii libflashrom1 1.4.0-3 ii libfwupd3 2.0.20-1~bpo13+1 ii libglib2.0-0t64 2.84.4-3~deb13u3 ii libgnutls30t64 3.8.9-3+deb13u4 ii libjcat1 0.2.3-1 ii libjson-glib-1.0-0 1.10.6+ds-2 ii liblzma5 5.8.1-1 ii libmbim-glib4 1.32.0-1 ii libmbim-proxy 1.32.0-1 ii libmm-glib0 1.24.0-1+deb13u1 ii libmnl0 1.0.5-3 ii libpolkit-gobject-1-0 126-2 ii libprotobuf-c1 1.5.1-1 ii libqmi-glib5 1.36.0-1 ii libqmi-proxy 1.36.0-1 ii libreadline8t64 8.2-6 ii libsqlite3-0 3.46.1-7+deb13u1 ii libsystemd0 257.13-1~deb13u1 ii libtss2-esys-3.0.2-0t64 4.1.3-1.2 ii libusb-1.0-0 2:1.0.28-1 ii libxmlb2 0.3.22-1 ii shared-mime-info 2.4-5+b2 ii systemd [systemd-sysusers] 257.13-1~deb13u1 ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1 Versions of packages fwupd recommends: ii bolt 0.9.8-1 ii dbus [default-dbus-system-bus] 1.16.2-2 ii fwupd-amd64-signed [fwupd-signed] 1:1.7+1 ii jq 1.7.1-6+deb13u2 ii python3 3.13.5-1 ii udisks2 2.10.1-12.1+deb13u1 Versions of packages fwupd suggests: pn gir1.2-fwupd-2.0 <none> -- Configuration Files: /etc/fwupd/fwupd.conf [Errno 13] Permission denied: '/etc/fwupd/fwupd.conf' /etc/pki/fwupd-metadata/LVFS-CA-2025PQ.pem [file not found] /etc/pki/fwupd/LVFS-CA-2025PQ.pem [file not found] -- no debconf information
