Bug#990447: fwupdmgr: Unable to install new updates
Same issue here on my Lenovo ThinkPad X390 when upgrading from ECP 1.17
(N2JHT33W) to 1.23 (N2JHT39W).
NB: .cab files downloaded on Lenovo website manually (no LVFS because
files are too old there).
I'm on Buster with the following shim/fwupd versions:
$ dpkg -l | awk '$2 ~ /shim/ || $2 ~ /fwupd/{print}'
ii fwupd 1.2.14-1~deb10u1
amd64 Firmware update daemon
ii fwupd-amd64-signed 1.2.14+1~deb10u1
amd64 Tools to manage UEFI firmware updates (signed)
ii libfwupd2:amd64 1.2.14-1~deb10u1
amd64 Firmware update daemon library
ii shim-helpers-amd64-signed 1+15.4+7~deb10u1
amd64 boot loader to chain-load signed boot loaders
(signed by Debian)
ii shim-signed:amd64 1.38~1+deb10u1+15.4-7~deb10u1
amd64 Secure Boot chain-loading bootloader
(Microsoft-signed binary)
ii shim-signed-common 1.38~1+deb10u1+15.4-7~deb10u1
all Secure Boot chain-loading bootloader (common
helper scripts)
ii shim-unsigned 15.4-7~deb10u1
amd64 boot loader to chain-load signed boot loaders
under Secure Boot
Like the OP, I have no "boot order lock", I select the boot entry "Linux
Firmare Update" manually and my PC then boots to my regular Linux
partition with no upgrade operations...
However, unlike the OP, *it doesn't work any better after disabling
Secure Boot from UEFI settings*.
Can we still say that shim is faulty (no fwupd loading)?
Reply to: