Talk: Boot fails with “bad shim signature” in atomic desktops and IoT

[rugk]

I’d say the common issue here BTW is a duplicate of that already existing common issue (which just does not mention IoT):

Boot might fail with "vmlinuz[…] has invalid signature" in atomic desktops

Problem In Fedora atomic desktops installations (Silverblue, Kinote, Sway Atomic, Budgie Atomic), which have been setup several releases ago, the system may stop booting and show an error message similar to this: error: …/…/grub-core/loader/i386/efi/linux.c:307:Chd0.gpt2/ostree/fedora-[hash]/vmlinuz-[version] has invalid signature. error: …/…/grub-core/loader/i386/efi/linux.c:205:you need to load the kernel first. Press any key to continue… Cause Fedora atomic desktops currently do not …