On Mon, Sep 2, 2019 at 5:00 PM Jeffrey Walton wrote: > > Ubuntu provided 5.0.0-27-generic today. I attempted to reboot but > booting fails due to a failed signature check. > > I'd like to tell the kernel to skip the signature check during boot. I > found Ubuntu's UEFI | SecureBoot | DKMS > (https://wiki.ubuntu.com/UEFI/SecureBoot/DKMS) wiki page. It discusses > several ways to disable signature checks but they assume a working > machine. > > I'm at the grub boot menu with the menu open ready for editing. > > What option should I use to disable the signature checks during boot? Attached is the transcript of the update. I keep a copy in case of errors (like now). This looks unusual. The latest kernel was handled like it was the old kernel: The following packages will be REMOVED: linux-image-5.0.0-27-generic* 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded. After this operation, 0 B of additional disk space will be used. (Reading database ... 222607 files and directories currently installed.) Purging configuration files for linux-image-5.0.0-27-generic (5.0.0-27.28~18.04.1) ... I: /vmlinuz is now a symlink to boot/vmlinuz-5.0.0-25-generic I: /initrd.img is now a symlink to boot/initrd.img-5.0.0-25-generic rmdir: failed to remove '/lib/modules/5.0.0-27-generic': Directory not empty Removed kernel linux-image-5.0.0-27-generic ...