Good day,
I have no pending update:
Devices with no available firmware updates:
• ASUSTeK KEK Certificate
• ASUSTeK SW Key Certificate
• Internal SPI Controller (BIOS)
• KEK CA
• Master Certificate Authority
• Master Certificate Authority
• Option ROM UEFI CA
• SBAT
• SSDPEKNW512G8
• System Firmware
Devices with the latest available firmware version:
• UEFI CA
• UEFI dbx
• Windows UEFI CA
No updates available
After several tests, here are my findings:
1/ Desinstalled and purge the deb packages and dependancies:
fwupd
gnome-software-plugin-fwupd
libfwupd3
2/ Test reboot: normal stoppage
3/ Reinstalled the deb packages:
fwupd (2.1.6-3ubuntu1)
4/ Immediate reboot: normal stoppage
5/ after a few hour, tested again a reboot: the stoppage pause for
arround one minutes waiting for fwupd.shutdown to finish
6/ looked at the script /usr/lib/systemd/system-shutdown/fwupd.shutdown:
It test if the database file "pending.db" exist and if true launch
/usr/bin/fwupdtool activate.
I've so deleted this file and tested a reboot: normal stoppage.
After the reboot this db file is back again.
The SQLite dump of the `pending.db` file reveals that the file contains no
component (firmware) to updates, but only the HSI security history
(`hsi_history`) and my PC's integrity status (`SecurityAttributes`).
Each time Ubuntu 26.10 boots, the `fwupd` daemon analyzes the PC's security
(status of TPM, Secure Boot, Intel BootGuard, etc.) and generates this security
report within `pending.db`.
Since the `/usr/lib/systemd/system-shutdown/fwupd.shutdown` script triggers
as soon as the `pending.db` file exists, it runs during every shutdown, even
when there is no firmware to install.
Once launched, the `/usr/bin/fwupdtool activate` command hangs for a minute
while attempting to validate these security attributes with your ASUS
motherboard, conflicting with the system shutdown process.
7/ desinstalled and purge the deb packages and installed the snap version:
fwupd 2.1.7-758-g9666592be Rev. 9086
latest/edge canonical✓
gnome-firmware 49.0-4-g514ad37 Rev. 142
latest/edge superm1
firmware-updater 0+git.64c41a0 Rev. 262
latest/edge canonical✓
Now stoppage is always normal but none of gnome-firmware nor
firmware-updater detect my devices (normal daemon seems necessary).
Let me know if others tests may be needed.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169304
Title:
Regression: systemd-shutdown hangs for 60s at fwupd.shutdown hook
under kernel 7.3 (ASUS X580GD)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/2169304/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
