ok based on the process tree I've identified the source of the trouble, /etc/kernel/header_postinst.d/dkms invokes dkms_autoinstaller with >/dev/null. So this is a similar symptom to other bugs that have been fixed, but is a separate unfixed bug.
Note that a workaround for this problem is to run 'sudo update- secureboot-policy --enroll-key' outside of apt. ** Also affects: dkms (Ubuntu) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Eoan) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Eoan) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Cosmic) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Cosmic) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Disco) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Disco) Importance: Undecided Status: New ** No longer affects: shim-signed (Ubuntu) ** No longer affects: shim-signed (Ubuntu Xenial) ** No longer affects: shim-signed (Ubuntu Bionic) ** No longer affects: shim-signed (Ubuntu Cosmic) ** No longer affects: shim-signed (Ubuntu Disco) ** No longer affects: shim-signed (Ubuntu Eoan) ** Changed in: dkms (Ubuntu Xenial) Importance: Undecided => High ** Changed in: dkms (Ubuntu Bionic) Importance: Undecided => High ** Changed in: dkms (Ubuntu Cosmic) Importance: Undecided => High ** Changed in: dkms (Ubuntu Disco) Importance: Undecided => High ** Changed in: dkms (Ubuntu Eoan) Importance: Undecided => High ** Changed in: dkms (Ubuntu Xenial) Status: New => Triaged ** Changed in: dkms (Ubuntu Bionic) Status: New => Triaged ** Changed in: dkms (Ubuntu Cosmic) Status: New => Triaged ** Changed in: dkms (Ubuntu Disco) Status: New => Triaged ** Changed in: dkms (Ubuntu Eoan) Status: New => Triaged -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Triaged Status in dkms source package in Xenial: Triaged Status in dkms source package in Bionic: Triaged Status in dkms source package in Cosmic: Triaged Status in dkms source package in Disco: Triaged Status in dkms source package in Eoan: Triaged Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp