The problem is in Fedora 40 too. I have also tried the following (with Ubuntu Noble Numbat 24.04): Added new CodeSigning key to UEFI db keystore. Rebuilt shim-15.8 with the new key. Added Canonical Codesigning key from shim-signed source package to UEFI db keystore. Signed all my efi's with the new key (shimx64, mmx64, fbx64, grubx64, Xen) I didn't sign the kernel as I added the Canonical key to the db keystore. Results: Booted linux kernel fine. Still get same problem with Xen even though its signed, and the key is being recognised by SecureBoot and shim on the other efi's. Also added `insmod multiboot2` statements to `/etc/grub.d/20_linux_xen` so they would be at the top of each xen menu block in the `/boot/efi/grub/grub.cfg`
Maybe I should get on the grub mailing lists before spending more time on this in case I'm wasting my time. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1520979 Title: Grub multiboot is unable to load Xen under EFI To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-release-notes/+bug/1520979/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
