dnf update & shim-x64

User_GDNX5

hello

What is the correct way to resolv this?

[[email protected] a1ex]# dnf clean all

37 files removed

[[email protected] a1ex]# dnf repolist

repo id                               repo name

nginx-stable8                            nginx stable repo

ol8_appstream                            Oracle Linux 8 Application Stream (x86_64)

ol8_baseos_latest                          Oracle Linux 8 BaseOS Latest (x86_64)

ol8_developer_EPEL                          Oracle Linux 8 EPEL Packages for Development (x86_64)

ol8_developer_EPEL_modular                      Oracle Linux 8 EPEL Modular Packages for Development (x86_64)

[[email protected] a1ex]# dnf update  

nginx stable repo                                                              87 kB/s | 41 kB   00:00   

Oracle Linux 8 EPEL Packages for Development (x86_64)                                            31 MB/s | 31 MB   00:00   

Oracle Linux 8 EPEL Modular Packages for Development (x86_64)                                        904 kB/s | 248 kB   00:00   

Oracle Linux 8 BaseOS Latest (x86_64)                                                    45 MB/s | 46 MB   00:01   

Oracle Linux 8 Application Stream (x86_64)                                                  36 MB/s | 36 MB   00:01   

Error: 

 Problem 1: cannot install the best update candidate for package shim-x64-15.3-1.0.3.x86_64

 - nothing provides oracle(kernel-sig-key) >= 202204 needed by shim-x64-15.6-1.0.3.el8.x86_64

 Problem 2: problem with installed package shim-x64-15.3-1.0.3.x86_64

 - package grub2-efi-x64-1:2.02-123.0.3.el8.x86_64 conflicts with shim-x64 <= 15.3-1.0.3 provided by shim-x64-15.3-1.0.3.x86_64

 - cannot install the best update candidate for package grub2-efi-x64-1:2.02-123.0.1.el8.x86_64

 - nothing provides oracle(kernel-sig-key) >= 202204 needed by shim-x64-15.6-1.0.3.el8.x86_64

(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

User_GDNX5

I found the solution myself 🤔

yum-config-manager --enable ol8_UEKR6

yum install kernel-uek -y

yum-config-manager --disable ol8_UEKR6

grubby --set-default /boot/vmlinuz-`uname -r`

reboot

yum update

reboot

User_GCV2M

"yum update" broke on my OL8 RHCK systems, with the same error message about shim-x64.

So I tried your commands (first taking a VMware snapshot).

Result: the UEK kernel boots OK but if you try to boot an RHCK kernel, the boot process aborts due to an invalid signature on the vmlinuz-4.x file. The affected systems use EFI Secure Boot.

Can we expect further Shim-related updates to make Yum Update work again on OL8 RHCK systems?

Or is there an approved procedure to fix the Yum Update problem?

I would happily switch to UEK except that some of my systems need RHCK for compatibility with third party software.

User_GDNX5

Secure boot should be off for my solution, thx, i forgot to write