Symptoms
It has been brought to our attention that some servers are not able to reboot properly after completing a system update.
Description
It was reported to Red Hat that some servers were not able to reboot properly after completing an update. Most specifically, this was found to be related to the "grub2," "shim," and "mokutil" packages. This was in turn eventually reported to Red Hat directly. At this time Red Hat is currently working towards a permanent solution, but you can monitor the case on their site, here.
On RHEL 7 systems, the packages from the following RPM's are affected: grub2-2.02-0.86.el7_8.src.rpm, shim-15-7.el7_9.src.rpm, and shim-signed-15-7.el7_8.src.rpm
On RHEL 8 systems, the packages from the following RPM's are affected: grub2-2.02-87.el8_2.src.rpm and shim-15-14.el8_2.src.rpm
Workaround
The following information is also mentioned in the Red Hat Incident Report.
If at all possible, please avoid updating or rebooting servers that updated or installed these packages. Specifically, Red Hat has suggested:
- DO NOT apply the affected Errata RHSA-2020:3217 for RHEL 7.
- DO NOT apply the affected Errata RHSA-2020:3216 for RHEL 8.
However, if the errata has been applied, but system not yet been rebooted, please run the following commands to downgrade the problematic packages:
# yum downgrade shim\* grub2\* mokutil
Then, stop yum from upgrading the packages by adding the following entry in the file "/etc/yum.conf"
exclude=grub2* shim* mokutil
Once the issue is resolved by Red Hat, please update the "/etc/yum.conf" to remove the recently added "exclude" entry.
If you have rebooted the system after applying the updated errata packages, please attempt the following:
1.) Attempt to boot the system into Troubleshooting or rescue mode.
2.) Set up the network. (This article here may be helpful)
3.) Enter the chroot
# chroot /mnt/sysimage
4.) Downgrade the packages:
# yum downgrade shim\* grub2\* mokutil
5.) stop yum from upgrading the packages by adding the following entry in the file "/etc/yum.conf"
exclude=grub2* shim* mokutil
6.) Exit the chroot and reboot.
# exit
# exit
Once the issue is resolved by Red Hat, please update the "/etc/yum.conf" to remove the recently added "exclude" entry.
Please do note cPanel, LLC only supports the cPanel-provided software and does not provide general system-administration services. Additionally, these issues that have been identified seem to affect systems that have specific packages that are not provided by the cPanel software. If you need assistance making these changes, we suggest contacting your server provider or reaching out to a Qualified System Administrator.
Comments
0 comments
Article is closed for comments.