Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-09-06 Thread Eddy Petrișor
package grub-efi-amd64
found 984760 2.02+dfsg1-20+deb10u4
thanks

 Hello,

I also had this issue when upgrading from stretch to buster.
For me the BIOS allowed be to select the EFI image to boot, so I was
able to boot into the system that way, then the fix was to:

1) run again update-grub2 and
2) dpkg-reconfigure -plow grub-efi-amd64

After this the old FreeDOS images (HP diagnostics and FreeDOS) I have
were no longer booting via grub, but I kept them just in case and I
still can boot them via direct EFI image selection from BIOS.

Some info on my system:


eddy@aptonia:~ $ ll /dev/disk/by-id/
total 0
lrwxrwxrwx 1 root root 10 sep  2 14:44 dm-name-nmve-home -> ../../dm-1
lrwxrwxrwx 1 root root 10 sep  2 14:44 dm-name-nmve-lvcrypt -> ../../dm-3
lrwxrwxrwx 1 root root 10 sep  2 14:44 dm-name-nmve-root -> ../../dm-0
lrwxrwxrwx 1 root root 10 sep  2 14:44 dm-name-nmve-swap -> ../../dm-2
lrwxrwxrwx 1 root root 10 sep  2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3TCeJFI4DcmZKcD7dPi6cIdHpueQNgBHPY
-> ../../dm-3
lrwxrwxrwx 1 root root 10 sep  2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3TgemRtgdFDbSpUbPwRC2XuZlz0qd2TAe6
-> ../../dm-1
lrwxrwxrwx 1 root root 10 sep  2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3Thu3VxxfPFVJ2y1xVoBWopwxAdqh3RMNv
-> ../../dm-2
lrwxrwxrwx 1 root root 10 sep  2 14:44
dm-uuid-LVM-dszzt4JF4qOrlcZdVIM8pF8M4cwQBR3TLNIBeUak8X026nSToUE5QcrOpTfiuJfM
-> ../../dm-0
lrwxrwxrwx 1 root root 15 sep  2 14:44
lvm-pv-uuid-ZkjWrn-o4q3-wkB8-kvLh-k0L1-jRsM-9Wj11m -> ../../nvme0n1p5
lrwxrwxrwx 1 root root 13 sep  2 14:44 nvme-eui.ace42e008509e89f ->
../../nvme0n1
lrwxrwxrwx 1 root root 15 sep  2 14:44 nvme-eui.ace42e008509e89f-part1
-> ../../nvme0n1p1
lrwxrwxrwx 1 root root 15 sep  2 14:44 nvme-eui.ace42e008509e89f-part2
-> ../../nvme0n1p2
lrwxrwxrwx 1 root root 15 sep  2 14:44 nvme-eui.ace42e008509e89f-part3
-> ../../nvme0n1p3
lrwxrwxrwx 1 root root 15 sep  2 14:44 nvme-eui.ace42e008509e89f-part5
-> ../../nvme0n1p5
lrwxrwxrwx 1 root root 13 sep  2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L ->
../../nvme0n1
lrwxrwxrwx 1 root root 15 sep  2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part1 ->
../../nvme0n1p1
lrwxrwxrwx 1 root root 15 sep  2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part2 ->
../../nvme0n1p2
lrwxrwxrwx 1 root root 15 sep  2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part3 ->
../../nvme0n1p3
lrwxrwxrwx 1 root root 15 sep  2 14:44
nvme-SK_hynix_BC501_HFM256GDJTNG-8310A_NJ8CN75131210CU3L-part5 ->
../../nvme0n1p5
eddy@aptonia:~ $ ll /dev/disk/by-uuid/
total 0
lrwxrwxrwx 1 root root 10 sep  2 14:44
2615ddb7-eab6-428c-9291-c3245b41c1f3 -> ../../dm-2
lrwxrwxrwx 1 root root 15 sep  2 14:44 2C53-59FF -> ../../nvme0n1p2
lrwxrwxrwx 1 root root 10 sep  2 14:44
53ff31db-a553-42be-85ab-720ffcb070a7 -> ../../dm-0
lrwxrwxrwx 1 root root 10 sep  2 14:44
61f9b8c2-bc4d-46e4-8a2c-b1e443a54f48 -> ../../dm-3
lrwxrwxrwx 1 root root 15 sep  2 14:44 6A53-125B -> ../../nvme0n1p1
lrwxrwxrwx 1 root root 10 sep  2 14:44
714a3bfa-0c2e-4bb1-a800-407ed7bf0556 -> ../../dm-1
eddy@aptonia:~ $ cat /proc/mdstat
cat: /proc/mdstat: No such file or directory
eddy@aptonia:~ $ dpkg -l | grep grub-efi-amd64
ii  grub-efi-amd642.02+dfsg1-20+deb10u4
   amd64GRand Unified Bootloader, version 2 (EFI-AMD64
version)
ii  grub-efi-amd64-bin2.02+dfsg1-20+deb10u4
   amd64GRand Unified Bootloader, version 2 (EFI-AMD64
modules)
ii  grub-efi-amd64-signed 1+2.02+dfsg1+20+deb10u4
   amd64GRand Unified Bootloader, version 2 (amd64
UEFI signed by Debian)

eddy@aptonia:~ $ cat /boot/grub/grub.cfg
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
if [ -s $prefix/grubenv ]; then
  set have_grubenv=true
  load_env
fi
if [ "${next_entry}" ] ; then
   set default="${next_entry}"
   set next_entry=
   save_env next_entry
   set boot_once=true
else
   set default="0"
fi

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then
  set saved_entry="${prev_saved_entry}"
  save_env saved_entry
  set prev_saved_entry=
  save_env prev_saved_entry
  set boot_once=true
fi

function savedefault {
  if [ -z "${boot_once}" ]; then
saved_entry="${chosen}"
save_env saved_entry
  fi
}
function load_video {
  if [ x$feature_all_video_module = xy ]; then
insmod all_video
  else
insmod efi_gop
insmod efi_uga
insmod ieee1275_fb
insmod vbe
insmod vga
insmod video_bochs
insmod video_cirrus
  fi
}

if [ x$feature_default_font_path = xy ] ; then
   font=unicode
else
insmod part_msdos
insmod lvm
insmod ext2
set 

Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-17 Thread Ryan Thoryk

On 7/17/21 10:09 AM, Ryan Thoryk wrote:

On 7/17/21 9:44 AM, Steve McIntyre wrote:

I found that I was using an older ARM image from last year, but that 
doesn't mean the issue was fixed later.  In AWS's community AMI section, 
the main one I tried is listed as "debian-10-arm64-20200511-260".  When 
you launch it, if you do a package upgrade it installs a newer version 
of grub.  Then running a grub-install makes it unbootable.  If you do 
the dpkg-reconfigure method, you have to choose "yes" to the "force 
extra installation" question, if you choose "no", it won't boot anymore.


I tried launching a newer AMI, titled "debian-10-arm64-20210621-680", 
and that one reboots fine if you do a "grub-install", but that's because 
it didn't install a newer version of grub, since the packages are 
recent.  I don't know what would happen if it installed a newer grub, 
you might have to look into that.  In the boot folder the EFI boot 
loader is listed as "/boot/efi/EFI/BOOT/BOOTAA64.EFI", there's no 
"EFI/debian" folder.  I'm not sure what they did to generate the AMI image.


The AMI IDs I used are:
ami-00249fe66e0872181
and
ami-025a7500c83d92798

I didn't try the Marketplace one.



One thing to add to that - when I did a "grub-install" on the newer AMI, 
it didn't write a "EFI/debian" folder, just an "EFI/BOOT" folder, which 
means that it might be working properly.  If that's the case, then the 
older instances are broken, which would affect existing systems.  I'm 
not sure if a grub upgrade would change that or not.


--
Ryan Thoryk
r...@thoryk.com
r...@tliquest.net



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-17 Thread Ryan Thoryk

On 7/17/21 9:44 AM, Steve McIntyre wrote:

Hi Ryan,

So when you say "spin up a new Debian ARM VM on AWS", what exact image
are you using here? It sounds like the build process for that image
needs to be fixed to DTRT for the platform. Then you and other users
won't be bitten by this problem...



I found that I was using an older ARM image from last year, but that 
doesn't mean the issue was fixed later.  In AWS's community AMI section, 
the main one I tried is listed as "debian-10-arm64-20200511-260".  When 
you launch it, if you do a package upgrade it installs a newer version 
of grub.  Then running a grub-install makes it unbootable.  If you do 
the dpkg-reconfigure method, you have to choose "yes" to the "force 
extra installation" question, if you choose "no", it won't boot anymore.


I tried launching a newer AMI, titled "debian-10-arm64-20210621-680", 
and that one reboots fine if you do a "grub-install", but that's because 
it didn't install a newer version of grub, since the packages are 
recent.  I don't know what would happen if it installed a newer grub, 
you might have to look into that.  In the boot folder the EFI boot 
loader is listed as "/boot/efi/EFI/BOOT/BOOTAA64.EFI", there's no 
"EFI/debian" folder.  I'm not sure what they did to generate the AMI image.


The AMI IDs I used are:
ami-00249fe66e0872181
and
ami-025a7500c83d92798

I didn't try the Marketplace one.

--
Ryan Thoryk
r...@thoryk.com
r...@tliquest.net



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-17 Thread Steve McIntyre
Hi Ryan,

On Sat, Jul 17, 2021 at 09:19:22AM -0500, Ryan Thoryk wrote:
>On 7/17/21 8:18 AM, Steve McIntyre wrote:
>> On Sat, Jul 17, 2021 at 07:57:48AM -0500, Ryan Thoryk wrote:
>> EFI/debian is *NOT* wrong, it's the correct location for a system that
>> has working firmware which supports setting UEFI boot variables. If
>> you *also* need to write a copy of grub (etc.) to the removable media
>> location (EFI/boot) then that's supported as well by the Debian
>> packaging - run "dpkg-reconfigure grub-efi-arm64" and say yes when the
>> system asks about that.
>
>Thanks for that suggestion, that explains the correct procedure in resolving
>the issue.  What I'm trying to point out though (I tried this), is that if
>you spin up a new Debian ARM VM on AWS, and run "grub-install" *without*
>doing a dpkg-reconfigure, it results in an unbootable system.  To recover the
>system, you have to attach the disk on a different VM and replace the old
>boot loader image with the new one, then it boots again.  After running the
>dpkg-reconfigure command though like you suggested, it copied over the EFI
>boot image to the "BOOT" folder, and also set the nvram variables to
>apparently boot from the "debian" folder, so that solved the problem for me.
>After doing that, the system comes up after a reboot with the newer grub
>modules.
>
>With others on here, the issue might have to do with the system executing an
>older EFI boot image resulting in a module mismatch, like what happened to
>me.  Your dpkg-reconfigure suggestion might fix their issues too.

So when you say "spin up a new Debian ARM VM on AWS", what exact image
are you using here? It sounds like the build process for that image
needs to be fixed to DTRT for the platform. Then you and other users
won't be bitten by this problem...

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
"The problem with defending the purity of the English language is that
 English is about as pure as a cribhouse whore. We don't just borrow words; on
 occasion, English has pursued other languages down alleyways to beat them
 unconscious and rifle their pockets for new vocabulary."  -- James D. Nicoll



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-17 Thread Ryan Thoryk

On 7/17/21 8:18 AM, Steve McIntyre wrote:

On Sat, Jul 17, 2021 at 07:57:48AM -0500, Ryan Thoryk wrote:
EFI/debian is *NOT* wrong, it's the correct location for a system that
has working firmware which supports setting UEFI boot variables. If
you *also* need to write a copy of grub (etc.) to the removable media
location (EFI/boot) then that's supported as well by the Debian
packaging - run "dpkg-reconfigure grub-efi-arm64" and say yes when the
system asks about that.



Thanks for that suggestion, that explains the correct procedure in 
resolving the issue.  What I'm trying to point out though (I tried 
this), is that if you spin up a new Debian ARM VM on AWS, and run 
"grub-install" *without* doing a dpkg-reconfigure, it results in an 
unbootable system.  To recover the system, you have to attach the disk 
on a different VM and replace the old boot loader image with the new 
one, then it boots again.  After running the dpkg-reconfigure command 
though like you suggested, it copied over the EFI boot image to the 
"BOOT" folder, and also set the nvram variables to apparently boot from 
the "debian" folder, so that solved the problem for me.  After doing 
that, the system comes up after a reboot with the newer grub modules.


With others on here, the issue might have to do with the system 
executing an older EFI boot image resulting in a module mismatch, like 
what happened to me.  Your dpkg-reconfigure suggestion might fix their 
issues too.


--
Ryan Thoryk
r...@thoryk.com
r...@tliquest.net



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-17 Thread Steve McIntyre
On Sat, Jul 17, 2021 at 07:57:48AM -0500, Ryan Thoryk wrote:
>On Sat, 10 Jul 2021 23:15:15 +0100 Colin Watson  wrote:
>> In general, this means that grub-install is not installing to the place
>> that your firmware is actually booting from, which causes the core image
>> (installed to a file under /boot/efi/ on UEFI systems) to be out of sync
>> with the modules (installed to a subdirectory of /boot/grub/).  This is
>> much rarer on UEFI systems than on BIOS systems, but it's still possible
>> in some misconfigured cases.
>> 
>> Could you please attach the output of "sudo grub-install --debug", "sudo
>> efibootmgr -v", and "sudo find /boot/efi -ls"?
>
>Thanks for looking into this issue.
>
>I did some investigating this morning for my situation, and found the
>problem.  Your suggestion is what helped me.
>
>The test case I had was that if you start a new Debian ARM VM on AWS, and run
>grub-install on it, future boots fail, where they stop at the rescue prompt
>and an "insmod normal" shows the error message.  In other words,
>"grub-install" was breaking grub, which is pretty bad.
>
>After some investigating I found that grub-install was writing the EFI boot
>loader image (grubaa64.efi) to the wrong location on the system. It should be
>installing into /boot/efi/EFI/BOOT but is putting it into
>/boot/efi/EFI/debian.  Future boots fail because the loader image that
>executes (the one in BOOT) is the older version and is out of sync with the
>modules.
>
>I tried deleting the /boot/efi/EFI/BOOT folder to see what would happen,
>wondering if it would try to use the "EFI/debian" one, and after rebooting
>the system was stuck in an EFI shell (couldn't find a boot loader), so the
>"EFI/debian" folder is clearly wrong.  This could be similar to what's
>happening with others on here.

EFI/debian is *NOT* wrong, it's the correct location for a system that
has working firmware which supports setting UEFI boot variables. If
you *also* need to write a copy of grub (etc.) to the removable media
location (EFI/boot) then that's supported as well by the Debian
packaging - run "dpkg-reconfigure grub-efi-arm64" and say yes when the
system asks about that.

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
"Since phone messaging became popular, the young generation has lost the
 ability to read or write anything that is longer than one hundred and sixty
 characters."  -- Ignatios Souvatzis



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-17 Thread Ryan Thoryk

On Sat, 10 Jul 2021 23:15:15 +0100 Colin Watson  wrote:

In general, this means that grub-install is not installing to the place
that your firmware is actually booting from, which causes the core image
(installed to a file under /boot/efi/ on UEFI systems) to be out of sync
with the modules (installed to a subdirectory of /boot/grub/).  This is
much rarer on UEFI systems than on BIOS systems, but it's still possible
in some misconfigured cases.

Could you please attach the output of "sudo grub-install --debug", "sudo
efibootmgr -v", and "sudo find /boot/efi -ls"?



Thanks for looking into this issue.

I did some investigating this morning for my situation, and found the 
problem.  Your suggestion is what helped me.


The test case I had was that if you start a new Debian ARM VM on AWS, 
and run grub-install on it, future boots fail, where they stop at the 
rescue prompt and an "insmod normal" shows the error message.  In other 
words, "grub-install" was breaking grub, which is pretty bad.


After some investigating I found that grub-install was writing the EFI 
boot loader image (grubaa64.efi) to the wrong location on the system. 
It should be installing into /boot/efi/EFI/BOOT but is putting it into 
/boot/efi/EFI/debian.  Future boots fail because the loader image that 
executes (the one in BOOT) is the older version and is out of sync with 
the modules.


I tried deleting the /boot/efi/EFI/BOOT folder to see what would happen, 
wondering if it would try to use the "EFI/debian" one, and after 
rebooting the system was stuck in an EFI shell (couldn't find a boot 
loader), so the "EFI/debian" folder is clearly wrong.  This could be 
similar to what's happening with others on here.


--
Ryan Thoryk
r...@thoryk.com
r...@tliquest.net



Processed: Re: Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-10 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 moreinfo
Bug #984760 [grub-efi-amd64] grub-efi-amd64: upgrade works, boot fails (error: 
symbol `grub_is_lockdown` not found)
Added tag(s) moreinfo.

-- 
984760: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984760
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-07-10 Thread Colin Watson
Control: tag -1 moreinfo

Sorry for our long delay in replying to this.

On Mon, Mar 08, 2021 at 02:20:08PM +1100, Anand Kumria wrote:
> grub went into grub rescue mode and displayed:
> 
> error: symbol `grub_is_lockdown` not found

In general, this means that grub-install is not installing to the place
that your firmware is actually booting from, which causes the core image
(installed to a file under /boot/efi/ on UEFI systems) to be out of sync
with the modules (installed to a subdirectory of /boot/grub/).  This is
much rarer on UEFI systems than on BIOS systems, but it's still possible
in some misconfigured cases.

Could you please attach the output of "sudo grub-install --debug", "sudo
efibootmgr -v", and "sudo find /boot/efi -ls"?

> Currently, I am booting using a rescue CD and then entering commands to 
> manually start the laptop

What commands are you using?

> -- Package-specific info:
> 
> *** BEGIN /proc/mounts
> /dev/sda5 / ext4 rw,relatime,errors=remount-ro 0 0
> /dev/sda6 /home ext4 rw,relatime 0 0
> /dev/sda2 /boot/efi vfat 
> rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro
>  0 0
> *** END /proc/mounts
[...]
> *** BEGIN /dev/disk/by-id
> total 0
> lrwxrwxrwx 1 root root  9 Mar  8 11:14 ata-MATSHITADVD-RAM_UJ8C2_WP18_009183 
> -> ../../sr0
> lrwxrwxrwx 1 root root  9 Mar  8 11:14 ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY 
> -> ../../sda
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 
> ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part1 -> ../../sda1
> lrwxrwxrwx 1 root root 10 Mar  8 11:15 
> ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part2 -> ../../sda2
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 
> ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part3 -> ../../sda3
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 
> ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part4 -> ../../sda4
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 
> ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part5 -> ../../sda5
> lrwxrwxrwx 1 root root 10 Mar  8 11:15 
> ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY-part6 -> ../../sda6
> *** END /dev/disk/by-id
> 
> *** BEGIN /dev/disk/by-uuid
> total 0
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 141A3D7E1A3D5E44 -> ../../sda4
> lrwxrwxrwx 1 root root  9 Mar  8 11:15 2020-11-30-03-01-21-00 -> ../../sr0
> lrwxrwxrwx 1 root root 10 Mar  8 11:15 26cd5a33-dd28-4968-b2b4-2d134be2e444 
> -> ../../sda6
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 A65030AD50308659 -> ../../sda1
> lrwxrwxrwx 1 root root 10 Mar  8 11:15 DE31-8EDF -> ../../sda2
> lrwxrwxrwx 1 root root 10 Mar  8 11:14 a49dde0e-f2e4-4679-8c56-b9013d7b0fd2 
> -> ../../sda5
> *** END /dev/disk/by-uuid

I notice that not all your partitions are mounted.  What's on partitions
1, 3, and 4?  ("sudo parted -s /dev/sda print" might help.)

Thanks,

-- 
Colin Watson (he/him)  [cjwat...@debian.org]



Bug#984760: grub-efi-amd64: upgrade works, boot fails (error: symbol `grub_is_lockdown` not found)

2021-03-07 Thread Anand Kumria
Package: grub-efi-amd64
Version: 2.04-16
Severity: critical
Justification: breaks unrelated software
X-Debbugs-Cc: akum...@gmail.com

Dear Maintainer,

   * What led up to the situation?

A Toshiba laptop with a single disk, with GPT partitions, a few days ago 
performed a normal upgrade:

...
2021-03-03 16:21:30 status installed man-db:amd64 2.9.4-2
2021-03-04 06:44:34 startup archives unpack
2021-03-04 06:44:34 upgrade grub2-common:amd64 2.04-15 2.04-16
2021-03-04 06:44:34 status half-configured grub2-common:amd64 2.04-15
2021-03-04 06:44:34 status unpacked grub2-common:amd64 2.04-15
2021-03-04 06:44:34 status half-installed grub2-common:amd64 2.04-15
2021-03-04 06:44:34 status triggers-pending man-db:amd64 2.9.4-2
2021-03-04 06:44:34 status unpacked grub2-common:amd64 2.04-16
2021-03-04 06:44:35 upgrade grub-efi-amd64:amd64 2.04-15 2.04-16
2021-03-04 06:44:35 status half-configured grub-efi-amd64:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64:amd64 2.04-15
2021-03-04 06:44:35 status half-installed grub-efi-amd64:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:35 upgrade grub-efi-amd64-bin:amd64 2.04-15 2.04-16
2021-03-04 06:44:35 status half-configured grub-efi-amd64-bin:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64-bin:amd64 2.04-15
2021-03-04 06:44:35 status half-installed grub-efi-amd64-bin:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:35 upgrade grub-common:amd64 2.04-15 2.04-16
2021-03-04 06:44:35 status half-configured grub-common:amd64 2.04-15
2021-03-04 06:44:35 status unpacked grub-common:amd64 2.04-15
2021-03-04 06:44:35 status half-installed grub-common:amd64 2.04-15
2021-03-04 06:44:36 status unpacked grub-common:amd64 2.04-16
2021-03-04 06:44:36 startup packages configure
2021-03-04 06:44:36 configure grub-common:amd64 2.04-16 
2021-03-04 06:44:36 status unpacked grub-common:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub-common:amd64 2.04-16
2021-03-04 06:44:36 status installed grub-common:amd64 2.04-16
2021-03-04 06:44:36 configure grub-efi-amd64-bin:amd64 2.04-16 
2021-03-04 06:44:36 status unpacked grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:36 status installed grub-efi-amd64-bin:amd64 2.04-16
2021-03-04 06:44:36 configure grub2-common:amd64 2.04-16 
2021-03-04 06:44:36 status unpacked grub2-common:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub2-common:amd64 2.04-16
2021-03-04 06:44:36 status installed grub2-common:amd64 2.04-16
2021-03-04 06:44:36 configure grub-efi-amd64:amd64 2.04-16 
2021-03-04 06:44:36 status unpacked grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:36 status half-configured grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:49 status installed grub-efi-amd64:amd64 2.04-16
2021-03-04 06:44:49 trigproc man-db:amd64 2.9.4-2 
2021-03-04 06:44:49 status half-configured man-db:amd64 2.9.4-2
2021-03-04 06:44:50 status installed man-db:amd64 2.9.4-2
...

During the course of this upgrade, I was prompted to run:

$ /usr/share/debconf/fix_db.pl

Do to some debconf database corrupt (I believe the package which prompted this 
was either mysql-common or mariadb-common)

I recall some questions / answers related to linux (and potentially grub) being 
removed due to there being no corresponding question (or similiar)

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

Rebooted on 7 Mar

   * What was the outcome of this action?

grub went into grub rescue mode and displayed:

error: symbol `grub_is_lockdown` not found

   * What outcome did you expect instead?

A reboot into a functioning system.


Currently, I am booting using a rescue CD and then entering commands to 
manually start the laptop

-- Package-specific info:

*** BEGIN /proc/mounts
/dev/sda5 / ext4 rw,relatime,errors=remount-ro 0 0
/dev/sda6 /home ext4 rw,relatime 0 0
/dev/sda2 /boot/efi vfat 
rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro
 0 0
*** END /proc/mounts

*** BEGIN /boot/grub/device.map
(hd0)   /dev/disk/by-id/ata-TOSHIBA_THNSNS128GCSP_922S10RGT2JY
*** END /boot/grub/device.map

*** BEGIN /boot/grub/grub.cfg
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
if [ -s $prefix/grubenv ]; then
  set have_grubenv=true
  load_env
fi
if [ "${next_entry}" ] ; then
   set default="${next_entry}"
   set next_entry=
   save_env next_entry
   set boot_once=true
else
   set default="0"
fi

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then