CentOS - Aug 2020 - 8.2.2004 Latest yum update renders machine unbootable

><snip>

> > I'll post here again once we have pushed the EL8 and CentOS Stream
updates.
>
>OK .. I have also now pushed the CentOS Linux 8 update .. you should see
>an update to SHIM .. the new versions are:
>
>PowerTools/x86_64/os/Packages/shim-unsigned-x64-15-8.el8.x86_64.rpm
>BaseOS/x86_64/os/Packages/shim-ia32-15-15.el8_2.x86_64.rpm
>BaseOS/x86_64/os/Packages/shim-x64-15-15.el8_2.x86_64.rpm
>
>For CentOS Linux 7 .. the new files are:
>
>x86_64/Packages/mokutil-15-8.el7.x86_64.rpm
>x86_64/Packages/shim-ia32-15-8.el7.x86_64.rpm
>x86_64/Packages/shim-unsigned-ia32-15-8.el7.x86_64.rpm
>x86_64/Packages/shim-unsigned-x64-15-8.el7.x86_64.rpm
>x86_64/Packages/shim-x64-15-8.el7.x86_64.rpm
>
>You need only replace the files you currently have installed, not
>install every file.
>
>Please report both positive and negative results.
>
>Thanks,
>Johnny Hughes
>
I updated my Centos 7, and it's awaiting a reboot.  The version of 
shim says 15-7, which I presume is the bad one.

What do I need to do?  Obviously, a reboot will encounter the 
failure.  Or, should I perform "yum update" periodically and wait for 
shim 15-8 to appear, and only after that do the reboot?  Or is there 
some other remedy?

And by the way, I'm amazed at the speed with which this problem was 
addressed and a fix provided.  You guys work wonders.

David

On 8/2/20 8:04 AM, david wrote:
> 
>> <snip>
> 
> 
> 
>> > I'll post here again once we have pushed the EL8 and CentOS
Stream
>> updates.
>>
>> OK .. I have also now pushed the CentOS Linux 8 update .. you should
see
>> an update to SHIM .. the new versions are:
>>
>> PowerTools/x86_64/os/Packages/shim-unsigned-x64-15-8.el8.x86_64.rpm
>> BaseOS/x86_64/os/Packages/shim-ia32-15-15.el8_2.x86_64.rpm
>> BaseOS/x86_64/os/Packages/shim-x64-15-15.el8_2.x86_64.rpm
>>
>> For CentOS Linux 7 .. the new files are:
>>
>> x86_64/Packages/mokutil-15-8.el7.x86_64.rpm
>> x86_64/Packages/shim-ia32-15-8.el7.x86_64.rpm
>> x86_64/Packages/shim-unsigned-ia32-15-8.el7.x86_64.rpm
>> x86_64/Packages/shim-unsigned-x64-15-8.el7.x86_64.rpm
>> x86_64/Packages/shim-x64-15-8.el7.x86_64.rpm
>>
>> You need only replace the files you currently have installed, not
>> install every file.
>>
>> Please report both positive and negative results.
>>
>> Thanks,
>> Johnny Hughes
>>
> I updated my Centos 7, and it's awaiting a reboot.? The version of shim
> says 15-7, which I presume is the bad one.
> 
> What do I need to do?? Obviously, a reboot will encounter the failure.?
> Or, should I perform "yum update" periodically and wait for shim
15-8 to
> appear, and only after that do the reboot?? Or is there some other remedy?
> 
> And by the way, I'm amazed at the speed with which this problem was
> addressed and a fix provided.? You guys work wonders.
> 
> David
It would be best IF the kernel and shim get installed at the same time
if possible .. so I would install the kernel again (since it is not
running yet) with the new shim.

BTW .. it does not fail on every install .. so it might work w/o the new
update.  However, no need to chance it at this point.  Wait until the
new shim is there and install it and reinstall the kernel is my advise.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20200802/89eea4ff/attachment.sig>

At 06:10 AM 8/2/2020, you wrote:
>On 8/2/20 8:04 AM, david wrote:
> >
> >> <snip>
> >
> >
> >
> >> > I'll post here again once we have pushed the EL8 and
CentOS Stream
> >> updates.
> >>
> >> OK .. I have also now pushed the CentOS Linux 8 update .. you
should see
> >> an update to SHIM .. the new versions are:
> >>
> >>
PowerTools/x86_64/os/Packages/shim-unsigned-x64-15-8.el8.x86_64.rpm
> >> BaseOS/x86_64/os/Packages/shim-ia32-15-15.el8_2.x86_64.rpm
> >> BaseOS/x86_64/os/Packages/shim-x64-15-15.el8_2.x86_64.rpm
> >>
> >> For CentOS Linux 7 .. the new files are:
> >>
> >> x86_64/Packages/mokutil-15-8.el7.x86_64.rpm
> >> x86_64/Packages/shim-ia32-15-8.el7.x86_64.rpm
> >> x86_64/Packages/shim-unsigned-ia32-15-8.el7.x86_64.rpm
> >> x86_64/Packages/shim-unsigned-x64-15-8.el7.x86_64.rpm
> >> x86_64/Packages/shim-x64-15-8.el7.x86_64.rpm
> >>
> >> You need only replace the files you currently have installed, not
> >> install every file.
> >>
> >> Please report both positive and negative results.
> >>
> >> Thanks,
> >> Johnny Hughes
> >>
> > I updated my Centos 7, and it's awaiting a reboot.?  The version
of shim
> > says 15-7, which I presume is the bad one.
> >
> > What do I need to do??  Obviously, a reboot will encounter the
failure.?
> > Or, should I perform "yum update" periodically and wait for
shim 15-8 to
> > appear, and only after that do the reboot??  Or is there some other
remedy?
> >
> > And by the way, I'm amazed at the speed with which this problem
was
> > addressed and a fix provided.?  You guys work wonders.
> >
> > David
>
>It would be best IF the kernel and shim get installed at the same time
>if possible .. so I would install the kernel again (since it is not
>running yet) with the new shim.
>
>BTW .. it does not fail on every install .. so it might work w/o the new
>update.  However, no need to chance it at this point.  Wait until the
>new shim is there and install it and reinstall the kernel is my advise.
Here's what I get...

rpm -qa | grep shim
shim-x64-15-7.el7_9.x86_64

yum update
Loaded plugins: fastestmirror, langpacks, priorities
Loading mirror speeds from cached hostfile
  * base: mirror.fileplanet.com
  * epel: mirror.prgmr.com
  * extras: mirror.shastacoe.net
  * remi-php73: mirror.sjc02.svwh.net
  * remi-safe: mirror.sjc02.svwh.net
  * updates: centos-distro.1gservers.com
373 packages excluded due to repository priority protections
No packages marked for update



Should I just wait for 15-8 to appear?

David