Bluefin stable image 40.20240801.0 fails to boot

[stego]

There was an update yesterday (thursday), which probably means that it was a security update, given that stable is typically updated on tuesdays.

When I select the newest grup menu entry I get (transcribed):

error: ../../grub_core/kern/efi/sb.c:182 bad shim signature
error: ../../loader/i386/efi/linux.c:258 you need to load the kernel first

And after a few seconds the grub boot menu opens again.

Secure boot is enabled.

$ rpm-ostree status
State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
  ostree-image-signed:docker://ghcr.io/ublue-os/bluefin:stable
                   Digest: sha256:b8ec0f2ab98acad7c01d4f80e8584a213d91b7b94324102d510f2a5e07bf31a9
                  Version: 40.20240801.0 (2024-08-01T19:51:22Z)
                     Diff: 25 upgraded, 7 removed, 7 added

● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin:stable
                   Digest: sha256:1afce620e1190ad2cd194579b38d1eeb45f843c40a9380da78940b4b0c7585a9
                  Version: 40.20240730.0 (2024-07-30T05:49:18Z)

[nicknamenamenick]

This is most likely Secure Boot related. I would disable it, then enter ujust enroll-secure-boot-key in the terminal on the next boot and enter the password universalblue and turn Secure Boot back on, and see if the error still occurs.

[stego]

That solved it. I’m still new to secure boot and I didn’t know that I also need to run ujust enroll-secure-boot-key after switching secure boot on.