CentOS - Nov 2018 - kernel 3.10.0-957.el7.x86_64 + EFI on Dell server - problem

hi guys

I've one box where I just yesterday upgraded Centos. I 
wonder if that kernel upgrade process might somewhat 
troublesome.
After that upgrade UEFI boot fails with:

Failed to set MokListRT: Invalid Parameter
Something has gone seriously wrong: import_mok_state() failed
: Invalid Parameter

Has anybody seen that? And maybe know to fix it?
many thanks, L.

On 11/20/2018 07:32 AM, lejeczek via CentOS wrote:
> hi guys
> 
> I've one box where I just yesterday upgraded Centos. I wonder if that
> kernel upgrade process might somewhat troublesome.
> After that upgrade UEFI boot fails with:
> 
> Failed to set MokListRT: Invalid Parameter
> Something has gone seriously wrong: import_mok_state() failed
> : Invalid Parameter
> 
> Has anybody seen that? And maybe know to fix it?
> many thanks, L.
We have updates dozens of Dell servers with that kernel/grub2 combo.
That doesn't mean there might not be an issue with something though ..
but as far as we can tell. Secureboot and UEFI both work OK on our machines.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20181120/5258ff42/attachment-0001.sig>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 2018-11-20 at 13:32 +0000, lejeczek via CentOS
wrote:
> hi guys
> 
> I've one box where I just yesterday upgraded Centos. I 
> wonder if that kernel upgrade process might somewhat 
> troublesome.
> After that upgrade UEFI boot fails with:
> 
> Failed to set MokListRT: Invalid Parameter
> Something has gone seriously wrong: import_mok_state() failed
> : Invalid Parameter
> 
> Has anybody seen that? And maybe know to fix it?
> many thanks, L.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
Hi,

Seen similar on my RHEL 7.6 laptop and reported (locked) on bugzilla:

https://bugzilla.redhat.com/show_bug.cgi?id=1651592

Regards

Phil

- -- 
*** If this is a mailing list, I am subscribed, no need to CC me.***

Playing the game for the games sake.

IRC: kathenas

Web: https://kathenas.org

Github: https://github.com/kathenas

GitLab: https://gitlab.com/kathenas

Twitter: kathenasorg

GPG: A0C3 4C6A AC2B B8F4 F1E5 EDF4 333F 60DC B0B9 BB77
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=tFG2
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 2018-11-20 at 13:42 +0000, Phil Wyett wrote:
> On Tue, 2018-11-20 at 13:32 +0000, lejeczek via CentOS wrote:
> > hi guys
> > 
> > I've one box where I just yesterday upgraded Centos. I 
> > wonder if that kernel upgrade process might somewhat 
> > troublesome.
> > After that upgrade UEFI boot fails with:
> > 
> > Failed to set MokListRT: Invalid Parameter
> > Something has gone seriously wrong: import_mok_state() failed
> > : Invalid Parameter
> > 
> > Has anybody seen that? And maybe know to fix it?
> > many thanks, L.
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> 
> Hi,
> 
> Seen similar on my RHEL 7.6 laptop and reported (locked) on bugzilla:
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=1651592
> 
> Regards
> 
> Phil
> 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
Whoops, that is the one for 8 I have been added on. Bug I reported for 7.6 (also
locked):

https://bugzilla.redhat.com/show_bug.cgi?id=1646022

Regards

Phil

- -- 
*** If this is a mailing list, I am subscribed, no need to CC me.***

Playing the game for the games sake.

IRC: kathenas

Web: https://kathenas.org

Github: https://github.com/kathenas

GitLab: https://gitlab.com/kathenas

Twitter: kathenasorg

GPG: A0C3 4C6A AC2B B8F4 F1E5 EDF4 333F 60DC B0B9 BB77
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=5+VP
-----END PGP SIGNATURE-----

On Tue, Nov 20, 2018 at 01:32:44PM +0000, lejeczek via CentOS
wrote:
>
> hi guys
> 
> I've one box where I just yesterday upgraded Centos. I wonder if that
kernel
> upgrade process might somewhat troublesome.
> After that upgrade UEFI boot fails with:
> 
> Failed to set MokListRT: Invalid Parameter
> Something has gone seriously wrong: import_mok_state() failed
> : Invalid Parameter
> 
> Has anybody seen that? And maybe know to fix it?
> many thanks, L.
I don't know if it's related, but all of our dual-boot workstations
that used rEFInd for the boot selector stopped being able to launch
the shim EFI executable after upgrading to the 7.6 shim.  I had to
manually change the refind configuration to point at the GRUBX64 EFI
executable instead (we turn off secure boot anyway, custom kernel
modules). 

-- 
Jonathan Billings <billings at negate.org>

On 20/11/2018 13:58, Jonathan Billings wrote:
> On Tue, Nov 20, 2018 at 01:32:44PM +0000, lejeczek via CentOS wrote:
>> hi guys
>>
>> I've one box where I just yesterday upgraded Centos. I wonder if
that kernel
>> upgrade process might somewhat troublesome.
>> After that upgrade UEFI boot fails with:
>>
>> Failed to set MokListRT: Invalid Parameter
>> Something has gone seriously wrong: import_mok_state() failed
>> : Invalid Parameter
>>
>> Has anybody seen that? And maybe know to fix it?
>> many thanks, L.
> I don't know if it's related, but all of our dual-boot workstations
> that used rEFInd for the boot selector stopped being able to launch
> the shim EFI executable after upgrading to the 7.6 shim.  I had to
> manually change the refind configuration to point at the GRUBX64 EFI
> executable instead (we turn off secure boot anyway, custom kernel
> modules).
>
no dual boot for me, just Centos.
Can you outline the steps you took to fix it?
many thanks, L.

On 20/11/18 14:58, Jonathan Billings wrote:
> On Tue, Nov 20, 2018 at 01:32:44PM +0000, lejeczek via CentOS wrote:
>>
>> hi guys
>>
>> I've one box where I just yesterday upgraded Centos. I wonder if
that kernel
>> upgrade process might somewhat troublesome.
>> After that upgrade UEFI boot fails with:
>>
>> Failed to set MokListRT: Invalid Parameter
>> Something has gone seriously wrong: import_mok_state() failed
>> : Invalid Parameter
>>
>> Has anybody seen that? And maybe know to fix it?
>> many thanks, L.
> 
> I don't know if it's related, but all of our dual-boot workstations
> that used rEFInd for the boot selector stopped being able to launch
> the shim EFI executable after upgrading to the 7.6 shim.  I had to
> manually change the refind configuration to point at the GRUBX64 EFI
> executable instead (we turn off secure boot anyway, custom kernel
> modules). 
> 
No rEFInd on my old iMac 2008 (well, my wife's computer at home) but I
had myself to boot in rescue and copy grubx64.efi as shimx64.efi to have
the iMac to boot again (exclusively running CentOS 7)
I initially thought about a very old Apple firwmare (so incompatible
with shim v15) but if people on the list are reporting that for Dell
servers, I guess that it's not a good sign


-- 
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 56BEC54E | twitter: @arrfab

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20181126/e73cacb7/attachment-0001.sig>

On 20/11/18 14:32, lejeczek via CentOS wrote:
> hi guys
> 
> I've one box where I just yesterday upgraded Centos. I wonder if that
> kernel upgrade process might somewhat troublesome.
> After that upgrade UEFI boot fails with:
> 
> Failed to set MokListRT: Invalid Parameter
> Something has gone seriously wrong: import_mok_state() failed
> : Invalid Parameter
> 
> Has anybody seen that? And maybe know to fix it?
> many thanks, L.
Can you give more details about Dell server model and if you're running
latest firmware on it ?


-- 
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 56BEC54E | twitter: @arrfab

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20181126/c5607cbf/attachment-0001.sig>