Re: Secure boot - Uefi installation

From	Steve McIntyre <steve@einval.com>
Newsgroups	linux.debian.user
Subject	Re: Secure boot - Uefi installation
Date	2017-04-21 00:40 +0200
Message-ID	<tysU1-6iU-17@gated-at.bofh.it> (permalink)
References	<txmxj-5Sa-9@gated-at.bofh.it> <tykD7-18r-3@gated-at.bofh.it> <tykD7-18r-3@gated-at.bofh.it> <tyoGK-3NZ-13@gated-at.bofh.it>
Organization	Invalid Argument

Show all headers | View raw

pascal@plouf.fr.eu.org wrote:
>Le 20/04/2017 à 15:41, Kent West a écrit :
>>
>> I installed on a Dell (don't recall the model number now, but it's a recent
>> model), and I found that the firmware appears to be buggy, in that you can
>> specify a UEFI installation to boot, and it shows the setting you enter,
>> but it ignores that setting and boots only to the default installation,
>> which is something like "\boot\default\boot64.efi".
>
>/EFI/boot/bootx64.efi. It is the default EFI path, used on removable 
>media such as installation or live images and by Windows as a rescue 
>boot loader.
>
>I had the same issue on HP Elitebook 8460 or 8470 laptops.

It's unfortunately quite common. Far too many bad UEFI implementations
that aren't being validated against the spec properly. :-(

>> The only way I could get around it was to create a separate \default
>> directory (or whatever the default directory name was - I don't now
>> remember) and copy my debian64.efi (or whatever it was) file into that
>> directory, renamed as boot64.efi (or whatever the default name was that it
>> was looking for).
>
>Actually there is a simpler workaround : during the installation of the 
>GRUB boot loader, the Debian installer asks whether to install GRUB in 
>the "removable device path" or so. Just answer "yes" and it will install 
>a copy of GRUB's core image in the default EFI path.
>
>It does the same as "grub-install --force-extra-removable"

That, and it sets a debconf flag so that on future upgrades grub will
remember you need this and re-install there every time it installs in
the normal (correct) Debian path. This is important - if the 2 copies
of grub-efi on the system diverge too much then it can cause boot
failures.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
Is there anybody out there?

Thread

Secure boot - Uefi installation Karagkiaouris Diamantis <diamantis.karagkiaouris.dev@gmail.com> - 2017-04-17 23:40 +0200
  Re: Secure boot - Uefi installation Mark Fletcher <mark27q1@gmail.com> - 2017-04-18 01:30 +0200
    Re: Secure boot - Uefi installation Tony Baldwin <tonybaldwin@gmx.com> - 2017-04-18 05:50 +0200
    Re: Secure boot - Uefi installation Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-04-19 21:00 +0200
      Re: Secure boot - Uefi installation Diamantis Karagkiaouris <diamantis.karagkiaouris.dev@gmail.com> - 2017-04-19 21:10 +0200
        Re: Secure boot - Uefi installation Joel Rees <joel.rees@gmail.com> - 2017-04-20 02:40 +0200
          Re: Secure boot - Uefi installation Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-04-20 20:30 +0200
      Re: Secure boot - Uefi installation Mark Fletcher <mark27q1@gmail.com> - 2017-04-20 00:50 +0200
        Re: Secure boot - Uefi installation Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-04-20 07:10 +0200
  Re: Secure boot - Uefi installation solitone <solitone@mail.com> - 2017-04-18 07:40 +0200
  Re: Secure boot - Uefi installation Kent West <westk@acu.edu> - 2017-04-20 15:50 +0200
    Re: Secure boot - Uefi installation Kent West <westk@acu.edu> - 2017-04-20 15:50 +0200
    Re: Secure boot - Uefi installation solitone <solitone@mail.com> - 2017-04-20 15:50 +0200
      libreboot? Doc to follow? -- Re: Secure boot - Uefi installation fc <fc@AreYouForThePeople.org> - 2017-04-20 21:00 +0200
        Re: libreboot? Doc to follow? -- Re: Secure boot - Uefi installation Steve McIntyre <steve@einval.com> - 2017-04-21 00:40 +0200
          Re: libreboot? Doc to follow? -- Re: Secure boot - Uefi installation Joel Rees <joel.rees@gmail.com> - 2017-04-22 02:00 +0200
      RE: Secure boot - Uefi installation Bonno Bloksma <b.bloksma@tio.nl> - 2017-04-22 01:00 +0200
        Re: Secure boot - Uefi installation Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-04-22 09:20 +0200
    Re: Secure boot - Uefi installation Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-04-20 20:10 +0200
      Re: Secure boot - Uefi installation Steve McIntyre <steve@einval.com> - 2017-04-21 00:40 +0200
  Re: Secure boot - Uefi installation Joel Rees <joel.rees@gmail.com> - 2017-04-21 05:00 +0200

csiph-web