Bug#990867: shim-helpers-arm64-signed: post-install script fails with 'error exit status 1'
Package: shim-helpers-arm64-signed
Version: 1+15.4+6
Severity: important
Running 'aptitude safe-upgrade' on my Bullseye/Sid/Experimental system
fails:
Unpacking shim-unsigned (15.4-6) over (15.4-5) ...
Preparing to unpack .../3-shim-helpers-arm64-signed_1+15.4+6_arm64.deb ...
Unpacking shim-helpers-arm64-signed (1+15.4+6) over (1+15.4+5) ...
Preparing to unpack .../4-shim-signed-common_1.37+15.4-6_all.deb ...
Unpacking shim-signed-common (1.37+15.4-6) over (1.36+15.4-5) ...
Preparing to unpack .../5-shim-signed_1.37+15.4-6_arm64.deb ...
Unpacking shim-signed:arm64 (1.37+15.4-6) over (1.36+15.4-5) ...
Setting up libuv1:arm64 (1.40.0-2) ...
Setting up shim-signed-common (1.37+15.4-6) ...
No DKMS packages installed: not changing Secure Boot validation state.
Setting up udev (249-1) ...
Setting up python3-urllib3 (1.26.5-1~exp1) ...
Setting up shim-unsigned (15.4-6) ...
Setting up shim-helpers-arm64-signed (1+15.4+6) ...
Installing for arm64-efi platform.
grub-install: warning: Cannot set EFI variable Boot0000.
grub-install: warning: efivarfs_set_variable: failed to open /sys/firmware/efi/efivars/Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c for writing: Read-only file system.
grub-install: warning: _efi_set_variable_mode: ops->set_variable() failed: Read-only file system.
grub-install: error: failed to register the EFI boot entry: Read-only file system.
dpkg: error processing package shim-helpers-arm64-signed (--configure):
installed shim-helpers-arm64-signed package post-installation script subprocess returned error exit status 1
dpkg: dependency problems prevent configuration of shim-signed:arm64:
shim-signed:arm64 depends on shim-helpers-arm64-signed (>= 1+15.4+2); however:
Package shim-helpers-arm64-signed is not configured yet.
dpkg: error processing package shim-signed:arm64 (--configure):
dependency problems - leaving unconfigured
Setting up systemd (249-1) ...
Setting up systemd-timesyncd (249-1) ...
Setting up systemd-sysv (249-1) ...
Setting up libpam-systemd:arm64 (249-1) ...
Processing triggers for initramfs-tools (0.140) ...
update-initramfs: Generating /boot/initrd.img-5.10.47-rock64-00005-g0df86ccf5feb
W: Possible missing firmware /lib/firmware/renesas_usb_fw.mem for built-in driver xhci_pci
W: Possible missing firmware /lib/firmware/r8a779x_usb3_v3.dlmem for built-in driver xhci_plat_hcd
W: Possible missing firmware /lib/firmware/r8a779x_usb3_v2.dlmem for built-in driver xhci_plat_hcd
W: Possible missing firmware /lib/firmware/r8a779x_usb3_v1.dlmem for built-in driver xhci_plat_hcd
W: Possible missing firmware /lib/firmware/nvidia/tegra194/xusb.bin for built-in driver xhci_tegra
W: Possible missing firmware /lib/firmware/nvidia/tegra186/xusb.bin for built-in driver xhci_tegra
W: Possible missing firmware /lib/firmware/nvidia/tegra210/xusb.bin for built-in driver xhci_tegra
W: Possible missing firmware /lib/firmware/nvidia/tegra124/xusb.bin for built-in driver xhci_tegra
I: The initramfs will attempt to resume from /dev/sda1
I: (UUID=d97f0a17-fc61-403c-92f3-af5e2a7b33f8)
I: Set the RESUME variable to override this.
Processing triggers for libc-bin (2.31-12) ...
Processing triggers for man-db (2.9.4-2) ...
Processing triggers for dbus (1.13.18-2) ...
Errors were encountered while processing:
shim-helpers-arm64-signed
shim-signed:arm64
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up shim-helpers-arm64-signed (1+15.4+6) ...
Installing for arm64-efi platform.
grub-install: warning: Cannot set EFI variable Boot0000.
grub-install: warning: efivarfs_set_variable: failed to open /sys/firmware/efi/efivars/Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c for writing: Read-only file system.
grub-install: warning: _efi_set_variable_mode: ops->set_variable() failed: Read-only file system.
grub-install: error: failed to register the EFI boot entry: Read-only file system.
dpkg: error processing package shim-helpers-arm64-signed (--configure):
installed shim-helpers-arm64-signed package post-installation script subprocess returned error exit status 1
dpkg: dependency problems prevent configuration of shim-signed:arm64:
shim-signed:arm64 depends on shim-helpers-arm64-signed (>= 1+15.4+2); however:
Package shim-helpers-arm64-signed is not configured yet.
dpkg: error processing package shim-signed:arm64 (--configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
shim-helpers-arm64-signed
shim-signed:arm64
If the issue is in grub/grub-efi-arm64, feel free to reassign.
I've had this problem before and at some point found a fix/workaround,
but I wasn't smart enough to write that down.
I know that now every aptitude safe-upgrade will give me this error :-/
$ ls -l /sys/firmware/efi/efivars/
total 0
-rw-r--r-- 1 root root 5 1 jul 23:55 AuditMode-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 124 1 jul 23:55 Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 6 1 jul 23:55 BootCurrent-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 6 1 jul 23:55 BootOrder-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 5 1 jul 23:55 DeployedMode-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 12 1 jul 23:55 OsIndicationsSupported-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 10 1 jul 23:55 PlatformLang-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 10 1 jul 23:55 PlatformLangCodes-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 5 1 jul 23:55 SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 5 1 jul 23:55 SetupMode-8be4df61-93ca-11d2-aa0d-00e098032b8c
-rw-r--r-- 1 root root 5 1 jul 23:55 VendorKeys-8be4df61-93ca-11d2-aa0d-00e098032b8c
I have no idea what caused the 'Read-only file system' message.
While I'm now running an upstream kernel with a few patches for the
Rock64 device, I'm quite certain it happened previously with the Debian
kernel, so I'll assume that would happen now too.
If it's relevant at all.
Cheers,
Diederik
-- System Information:
Debian Release: 11.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'testing-security'), (500, 'unstable'), (101, 'experimental')
Architecture: arm64 (aarch64)
Kernel: Linux 5.10.47-rock64-00005-g0df86ccf5feb (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages shim-helpers-arm64-signed depends on:
ii shim-unsigned 15.4-6
shim-helpers-arm64-signed recommends no packages.
shim-helpers-arm64-signed suggests no packages.
-- no debconf information
Reply to: