I managed to replace the bogus PKFail PK key with the "Windows OEM PK" key from the CERT mitigation ...with only that change, regular grub now boots once more
So I suspect this has something to do with grub not handling a blacklisted EFI setup properly, even when the BIOS allows non-secure boot. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2173004 Title: grub on EFI boot with secure boot disabled refuses to load with "Something has gone seriously wrong" error; grub installed with --no- uefi-secure-boot still works To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2173004/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
