Issues updating firmware with fwupdmgr

[edwardlyle]

Has anyone hit this issue when updating the firmware for a Lenovo desktop?

$ sudo fwupdmgr update
╔══════════════════════════════════════════════════════════════════════════════╗
║ Upgrade KEK CA from 2011 to 2023?                                            ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ This updates the UEFI Signature Database (the "KEK") to the latest release   ║
║ from Microsoft, signed by LENOVO.                                            ║
║                                                                              ║
╚══════════════════════════════════════════════════════════════════════════════╝
Perform operation? [Y|n]: y
Writing…                 [*******                                ]
failed to write-firmware: failed to write (null): failed to write data to efivarsfs: Error writing to file descriptor: Invalid argument

$ sudo dmidecode -t1
# dmidecode 3.6
Getting SMBIOS data from sysfs.
SMBIOS 3.2.1 present.

Handle 0x0001, DMI type 1, 27 bytes
System Information
        Manufacturer: LENOVO
        Product Name: 30D2S0TA00
        Version: ThinkStation P330
        Serial Number: *************
        UUID: ***********************
        Wake-up Type: Power Switch
        SKU Number: LENOVO_MT_30D2_BU_Think_FM_ThinkStation P330
        Family: ThinkStation P330

$ lsb_release -sir
Ubuntu
25.04

[edwardlyle]

I have a similar issue when using the Firmware Updater GUI app.

[eeickmeyer]

@edwardlyle

I have a similar issue when using the Firmware Updater GUI app.

That’s because the gui part is just a frontend to what you did on the CLI, not a separate issue.

[oldfred]

Check UEFI settings.

Lenovo is one that has added security settings beyond UEFI Secure boot like Boot Lock or other similar settings.

Check your manual.

[ajgreeny]

This is a problem arising from the security repos of Ubuntu and will no doubt be overcome very soon.
I update/upgrade using terminal so i have copied the list of packages to update then simply removed linux-firmware from the list and continued the upgrade.
It’s a nuisance but not a major problem so either keep trying or uograde as I’ve done, ie minus linux-firmware.

[ogra]

Note that fwupdmgr has nothing to do with linux-firmware, this is a completely different problem from the issue with downloading a deb from the archive servers that is being discussed in the other megathread …

[SNAFUcore]

This is what i am getting. The software updater just continues to try and download the file over and over. I try clearing the cache but, with a server error at “Index of /ubuntu” it cannot continue or resolve. Changing mirrors is futile! What is also weird is, the file sizes. 100% downloaded at 550.7mb but, the file is supposed to be 577.4mb? Weird!

snafucore@snafucore:~$ sudo rm /var/lib/apt/lists/* -rf
snafucore@snafucore:~$ sudo apt update
Get:1 Index of /ubuntu plucky InRelease [265 kB]
Get:2 Index of /ubuntu plucky-security InRelease [126 kB]
Get:3 Index of /ubuntu plucky-security/main amd64 Packages [206 kB]
Get:4 Index of /ubuntu plucky-security/main i386 Packages [112 kB]
Get:5 Index of /ubuntu plucky-security/main Translation-en [53.8 kB]
Get:6 Index of /ubuntu plucky-security/main amd64 Components [14.8 kB]
Get:7 Index of /ubuntu plucky-security/main Icons (48x48) [3,575 B]
Get:8 Index of /ubuntu plucky-security/main Icons (64x64) [5,307 B]
Get:9 Index of /ubuntu plucky-security/main Icons (64x64@2) [29 B]
Get:10 Index of /ubuntu plucky-security/main amd64 c-n-f Metadata [4,024 B]
Get:11 Index of /ubuntu plucky-security/universe amd64 Packages [120 kB]
Get:12 Index of /ubuntu plucky-security/universe i386 Packages [73.8 kB]
Get:13 Index of /ubuntu plucky-security/universe Translation-en [40.2 kB]
Get:14 Index of /ubuntu plucky-security/universe amd64 Components [1,700 B]
Get:15 http://archive.ubuntu.com/ubuntu plucky-updates InRelease [126 kB]
Get:16 Index of /ubuntu plucky-security/universe Icons (48x48) [2,761 B]
Get:17 Index of /ubuntu plucky-security/universe Icons (64x64) [3,610 B]
Get:18 Index of /ubuntu plucky-security/universe Icons (64x64@2) [29 B]
Get:19 Index of /ubuntu plucky-security/universe amd64 c-n-f Metadata [3,376 B]
Get:20 Index of /ubuntu plucky/main amd64 Packages [1,446 kB]
Get:21 Index of /ubuntu plucky/main i386 Packages [1,082 kB]
Get:22 http://archive.ubuntu.com/ubuntu plucky/main Translation-en [519 kB]
Get:23 Index of /ubuntu plucky/main amd64 Components [414 kB]
Get:24 Index of /ubuntu plucky/main Icons (48x48) [85.8 kB]
Get:25 Index of /ubuntu plucky/main Icons (64x64) [122 kB]
Get:26 Index of /ubuntu plucky/main Icons (64x64@2) [21.8 kB]
Get:27 Index of /ubuntu plucky/main amd64 c-n-f Metadata [31.6 kB]
Get:28 Index of /ubuntu plucky/universe i386 Packages [8,591 kB]
Get:29 Index of /ubuntu plucky/universe amd64 Packages [16.3 MB]
Get:30 Index of /ubuntu plucky/universe Translation-en [6,281 kB]
Get:31 Index of /ubuntu plucky/universe amd64 Components [4,360 kB]
Get:32 Index of /ubuntu plucky/universe Icons (48x48) [3,688 kB]
Get:33 Index of /ubuntu plucky/universe Icons (64x64) [7,563 kB]
Get:34 Index of /ubuntu plucky/universe Icons (64x64@2) [103 kB]
Get:35 Index of /ubuntu plucky/universe amd64 c-n-f Metadata [104 B]
Get:36 Index of /ubuntu plucky-updates/main i386 Packages [179 kB]
Get:37 Index of /ubuntu plucky-updates/main amd64 Packages [308 kB]
Get:38 Index of /ubuntu plucky-updates/main Translation-en [81.2 kB]
Get:39 Index of /ubuntu plucky-updates/main amd64 Components [45.6 kB]
Get:40 Index of /ubuntu plucky-updates/main Icons (48x48) [21.6 kB]
Get:41 Index of /ubuntu plucky-updates/main Icons (64x64) [28.4 kB]
Get:42 Index of /ubuntu plucky-updates/main Icons (64x64@2) [29 B]
Get:43 Index of /ubuntu plucky-updates/main amd64 c-n-f Metadata [6,264 B]
Get:44 Index of /ubuntu plucky-updates/universe i386 Packages [102 kB]
Get:45 Index of /ubuntu plucky-updates/universe amd64 Packages [206 kB]
Get:46 Index of /ubuntu plucky-updates/universe Translation-en [63.7 kB]
Get:47 Index of /ubuntu plucky-updates/universe amd64 Components [23.9 kB]
Get:48 Index of /ubuntu plucky-updates/universe Icons (48x48) [49.2 kB]
Get:49 Index of /ubuntu plucky-updates/universe Icons (64x64) [61.6 kB]
Get:50 Index of /ubuntu plucky-updates/universe Icons (64x64@2) [29 B]
Get:51 Index of /ubuntu plucky-updates/universe amd64 c-n-f Metadata [4,920 B]
Fetched 53.0 MB in 8s (6,341 kB/s)
3 packages can be upgraded. Run ‘apt list --upgradable’ to see them.
snafucore@snafucore:~$ sudo apt-get upgrade
Reading package lists… Done
Building dependency tree… Done
Reading state information… Done
Calculating upgrade… Done
Calculating upgrade… Done
The following upgrades have been deferred due to phasing:
fwupd libfwupd3
The following packages will be upgraded:
linux-firmware
1 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
Need to get 577 MB of archives.
After this operation, 959 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Ign:1 Index of /ubuntu plucky-updates/main amd64 linux-firmware amd64 20250317.git1d4c88ee-0ubuntu1.6
Ign:1 Index of /ubuntu plucky-updates/main amd64 linux-firmware amd64 20250317.git1d4c88ee-0ubuntu1.6
Ign:1 Index of /ubuntu plucky-updates/main amd64 linux-firmware amd64 20250317.git1d4c88ee-0ubuntu1.6
Ign:1 Index of /ubuntu plucky-updates/main amd64 linux-firmware amd64 20250317.git1d4c88ee-0ubuntu1.6
Err:1 Index of /ubuntu plucky-updates/main amd64 linux-firmware amd64 20250317.git1d4c88ee-0ubuntu1.6
500 Internal Server Error [IP: 185.125.190.36 80]
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/l/linux-firmware/linux-firmware_20250317.git1d4c88ee-0ubuntu1.6_amd64.deb 500 Internal Server Error [IP: 185.125.190.36 80]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

I appears, Index of /ubuntu server is down.

[kpatz]

I’m having the same issue. With apt-cacher-ng I get a 500 error downloading http://security.ubuntu.com/ubuntu/pool/main/l/linux-firmware/linux-firmware_20220329.git681281e4-0ubuntu3.39_all.deb

I tried bypassing apt-cacher-ng and then it was downloading at 30kb/sec and would have taken 3+ HOURS to download the 316MB file. So something is wrong server side.

[ogra]

@SNAFUcore

The software updater just continues to try and download the file over and over

Completely unrelated to this topic … please lets stay on topic here about fwupdmgr (which has no relation at all to the linux-firmware package)…

Your issue is related to:

Current Status Of Ubuntu Update Errors: Please Read!

At the time of this post and answer (September 5, 2025, at approximately 10:40 UTC-4), it is known to Canonical and many people who are actively working on development, patching, etc. that there was an outage on the primary public repository servers. All security updates and other update pockets were unavailable, and the upload / processing queue for Security updates among others was obscenely backlogged as a result of the outage. This was reflected on https://status.canonical.com as acknowled…

EDIT: I have updated the topic title to be more specific, to avoid spam around the linux-firmware package issue …

[worcester12345]

I read that undersea fiber cables have been cut, affecting Microsoft Azure. Do any of these servers/services use Azure?

[ogra]

fwupdmgr uses the LVFS server at https://fwupd.org/ to pull its firmware blobs from (only if the HW vendor of a device uploaded it indeed), I doubt it uses Azure …

[saimanking]

now its working
i update and upgrade pakages

[letter3770]

I’m experiencing the same issue using Ubuntu 25.10 on an ASUS laptop. I contacted ASUS support and they asked me to disable secure boot, try to update again, and then re-enable secure boot. Since ASUS doesn’t officially support Ubuntu for my laptop I wanted to get some confirmation on this forum if this sounds safe to try?

[john-fallenbit]

Lenovo Legion desktop here.

Ran into this issue and changing the Secure Boot mode from “Deployed” to “User” is what fixed this for me. Once I did that I was able to run the update.

Just thought I would comment here as one of the comments above gave me an idea where to look if not the fix itself.