CentOS - Aug 2020 - 8.2.2004 Latest yum update renders machine unbootable

> Am 02.08.2020 um 14:34 schrieb Johnny Hughes <johnny at centos.org>:
> 
> ?On 8/2/20 6:59 AM, Johnny Hughes wrote:
>>> On 8/2/20 2:04 AM, Alessandro Baggi wrote:
>>> 
>>> Il 01/08/20 22:03, Greg Bailey ha scritto:
>>>> On 8/1/20 6:56 AM, david wrote:
>>>>> At 02:54 AM 8/1/2020, Alessandro Baggi wrote:
>>>>>> Hi Johnny,
>>>>>> thank you very much for clarification.
>>>>>> 
>>>>>> You said that in the centos infrastructure only one
server got the
>>>>>> problem.
>>>>>> What are the conditions that permit the breakage? There
is a particular
>>>>>> configuration (hw/sw) case that match always the
problem or it is
>>>>>> random?
>>>>>> 
>>>>>> Thank you
>>>>> 
>>>>> I have two servers running Centos 7 on apple hardware (one
mac-mini
>>>>> and one mac server).  They both failed to reboot a few days
ago.  So
>>>>> perhaps whatever anti-boot bug hit Centos 8, also hit
Centos 7.  I
>>>>> can't tell what version got updated since the system
simply fails to
>>>>> boot.  I don't even get a grub screen. I'll have to
rebuild the
>>>>> systems from scratch.
>>>>> 
>>>>> 
>>>> 
>>>> You should be able to boot off of installation media into
rescue mode,
>>>> and downgrade the grub2* and/or shim* RPMs.
>>>> 
>>>> -Greg
>>>> 
>>> I did the downgrade on a fresh install of c8.2 but yum said that
all
>>> selected packages (grub2,shim...) are already to the lowest version
and
>>> the downgrade is not possibile, ending with "nothing to
do".
>> 
>> Ok .. We are running through some final testing now for CentOS Linux 8
>> and CentOS Stream .. updates later today for EL8.
>> 
>> For CentOS Linux 7 .. I just pushed the latest shim packages (we had to
>> get these signed by Microsoft .. as do all distros that do shim.
>> Microsoft is the official CA for secureboot.
>> 
>> So in the next few hours, after the mirrors sync up .. you should be
>> able to fix any EL7 machines.
>> 
>> I'll post here again once we have pushed the EL8 and CentOS Stream
updates.
> 
> OK .. I have also now pushed the CentOS Linux 8 update .. you should see
> an update to SHIM .. the new versions are:
> 
> PowerTools/x86_64/os/Packages/shim-unsigned-x64-15-8.el8.x86_64.rpm
> BaseOS/x86_64/os/Packages/shim-ia32-15-15.el8_2.x86_64.rpm
> BaseOS/x86_64/os/Packages/shim-x64-15-15.el8_2.x86_64.rpm
> 
> For CentOS Linux 7 .. the new files are:
> 
> x86_64/Packages/mokutil-15-8.el7.x86_64.rpm
> x86_64/Packages/shim-ia32-15-8.el7.x86_64.rpm
> x86_64/Packages/shim-unsigned-ia32-15-8.el7.x86_64.rpm
> x86_64/Packages/shim-unsigned-x64-15-8.el7.x86_64.rpm
> x86_64/Packages/shim-x64-15-8.el7.x86_64.rpm
> 
> You need only replace the files you currently have installed, not
> install every file.
> 
> Please report both positive and negative results.
A previously afftected Aures nino POS-terminal boots just fine with CentOS 7 and
shim 15.8.

Now I will test an affected machine (Aures Twist POS terminal) that runs CentOS
8 (well, usually runs CentOS 8, but not now, since it does not boot ... :=>
> 
> Thanks,
> Johnny Hughes
> 
> 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos

>> 
>> Please report both positive and negative results.
> 
> A previously afftected Aures nino POS-terminal boots just fine with CentOS
7 and shim 15.8.
> 
> Now I will test an affected machine (Aures Twist POS terminal) that runs
CentOS 8 (well, usually runs CentOS 8, but not now, since it does not boot ...
:=>
The affected machine running CentOS 8 boots fine after upgrading to shim 15.15

Thanks for acting quickly, especially on a weekend.

On 8/2/20 8:10 AM, Marc Balmer via CentOS wrote:
>>>
>>> Please report both positive and negative results.
>>
>> A previously afftected Aures nino POS-terminal boots just fine with
CentOS 7 and shim 15.8.
>>
>> Now I will test an affected machine (Aures Twist POS terminal) that
runs CentOS 8 (well, usually runs CentOS 8, but not now, since it does not boot
... :=>
> 
> The affected machine running CentOS 8 boots fine after upgrading to shim
15.15
> 
> Thanks for acting quickly, especially on a weekend.
Thanks for the reports .. it is not the first weekend spent on this
issue .. not even the first in a row :)

The CentOS Stream update should be release in a few minutes unless we
hit a snag in testing.

Thanks,
Johnny Hughes

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20200802/21cbec57/attachment.sig>

Il 02/08/20 15:10, Marc Balmer via CentOS ha scritto:
> Thanks for acting quickly, especially on a weekend.
This. +1