[CentOS] 8.2.2004 Latest yum update renders machine unbootable

Sun Aug 2 12:33:59 UTC 2020
Johnny Hughes <johnny at centos.org>

On 8/2/20 6:59 AM, Johnny Hughes wrote:
> On 8/2/20 2:04 AM, Alessandro Baggi wrote:
>>
>> Il 01/08/20 22:03, Greg Bailey ha scritto:
>>> On 8/1/20 6:56 AM, david wrote:
>>>> At 02:54 AM 8/1/2020, Alessandro Baggi wrote:
>>>>> Hi Johnny,
>>>>> thank you very much for clarification.
>>>>>
>>>>> You said that in the centos infrastructure only one server got the
>>>>> problem.
>>>>> What are the conditions that permit the breakage? There is a particular
>>>>> configuration (hw/sw) case that match always the problem or it is
>>>>> random?
>>>>>
>>>>> Thank you
>>>>
>>>> I have two servers running Centos 7 on apple hardware (one mac-mini
>>>> and one mac server).  They both failed to reboot a few days ago.  So
>>>> perhaps whatever anti-boot bug hit Centos 8, also hit Centos 7.  I
>>>> can't tell what version got updated since the system simply fails to
>>>> boot.  I don't even get a grub screen. I'll have to rebuild the
>>>> systems from scratch.
>>>>
>>>>
>>>
>>> You should be able to boot off of installation media into rescue mode,
>>> and downgrade the grub2* and/or shim* RPMs.
>>>
>>> -Greg
>>>
>> I did the downgrade on a fresh install of c8.2 but yum said that all
>> selected packages (grub2,shim...) are already to the lowest version and
>> the downgrade is not possibile, ending with "nothing to do".
> 
> Ok .. We are running through some final testing now for CentOS Linux 8
> and CentOS Stream .. updates later today for EL8.
> 
> For CentOS Linux 7 .. I just pushed the latest shim packages (we had to
> get these signed by Microsoft .. as do all distros that do shim.
> Microsoft is the official CA for secureboot.
> 
> So in the next few hours, after the mirrors sync up .. you should be
> able to fix any EL7 machines.
> 
> I'll post here again once we have pushed the EL8 and CentOS Stream updates.

OK .. I have also now pushed the CentOS Linux 8 update .. you should see
an update to SHIM .. the new versions are:

PowerTools/x86_64/os/Packages/shim-unsigned-x64-15-8.el8.x86_64.rpm
BaseOS/x86_64/os/Packages/shim-ia32-15-15.el8_2.x86_64.rpm
BaseOS/x86_64/os/Packages/shim-x64-15-15.el8_2.x86_64.rpm

For CentOS Linux 7 .. the new files are:

x86_64/Packages/mokutil-15-8.el7.x86_64.rpm
x86_64/Packages/shim-ia32-15-8.el7.x86_64.rpm
x86_64/Packages/shim-unsigned-ia32-15-8.el7.x86_64.rpm
x86_64/Packages/shim-unsigned-x64-15-8.el7.x86_64.rpm
x86_64/Packages/shim-x64-15-8.el7.x86_64.rpm

You need only replace the files you currently have installed, not
install every file.

Please report both positive and negative results.

Thanks,
Johnny Hughes


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.centos.org/pipermail/centos/attachments/20200802/fab5a7f2/attachment-0004.sig>