Secure boot question (Solved)

[esjay]

This is a pretty idiotic question. My system works and boots with secure boot disabled. Now I wanted to switch my bios settings back to secure boot enabled - and my  Pepp 8 did not boot. So I disabled secure boot and everything is fine again. Sorry for this, but there must be something simple to get my secure boot working again.

[PCNetSpec]

what's the output from:

Code: [Select]

dpkg -l | grep signed

[esjay]

Morning, Sir! That is what I have thought about as well, but I am a noob in fixing it.

 

Code: [Select]

dpkg -l | grep signed
ii  fonts-opendyslexic                          20130616-1                                                  all          font designed to increase readability for readers with dyslexia
ii  fwupdate-signed                             1.11.3+0.5-2ubuntu7                                         amd64        Linux Firmware Updater EFI signed binary
ii  grub-efi-amd64-signed                       1.66.17+2.02~beta2-36ubuntu3.17                             amd64        GRand Unified Bootloader, version 2 (EFI-AMD64 version, signed)
ii  linux-signed-generic-hwe-16.04              4.13.0.36.55                                                amd64        Complete Signed Generic Linux kernel and headers
ii  linux-signed-image-4.13.0-32-generic        4.13.0-32.35~16.04.1                                        amd64        Signed kernel image generic
ii  linux-signed-image-4.13.0-36-generic        4.13.0-36.40~16.04.1                                        amd64        Signed kernel image generic
ii  linux-signed-image-generic-hwe-16.04        4.13.0.36.55                                                amd64        Signed Generic Linux kernel image
ii  shim                                        13-0ubuntu2                                                 amd64        boot loader to chain-load signed boot loaders under Secure Boot
ii  shim-signed                                 1.33.1~16.04.1+13-0ubuntu2                                  amd64        Secure Boot chain-loading bootloader (Microsoft-signed binary)

[AndyInMokum]

Hi esjay how's it going  ?  Welcome to the Peppermint Forum.  It's very nice to meet you  .  This is the place to come for any issues or questions you have about your system.  There are no stupid questions here.  They're all important and we like to help  .

For future reference, could you please remember to encapsulate all terminal outputs with the Insert, Code # function.  For extra long outputs, please use the Spoiler, Sp function.  If you’re a Chromium Browser and/or a Google Chrome user, please don't combine these functions.  For some reason they don’t work well together with these browsers.  Only use one or the other  .  These forum functions preserve the original format of the output.  This makes it easier for future visitors to relate to their own issues.  These functions are found in the forum editor, above the,  Embarrassed and  the Cry emoticon respectively.  Use the Preview button to check how it'll look in the forum.  This time, I've done it for you - many thanks  .

[esjay]

Ups, thank you, Andy, for doing my work. I have forgotten do it.

[PCNetSpec]

Well that looks fine to me, so what exactly happens when you attempt to boot with secureboot enabled ?

Do you get any messages onscreen ?

[esjay]

Hi there,

well, the machine simply does not boot with secure boot enabled, black screen, nothing happens. I have had to shutdown the hard way, start again (directly into the bios settings, where I disable secure boot)  - and all is working fine. I have no explanation. I have reinstalled Pepp 8 three times yesterday to be sure, and then decided to post here.

[PCNetSpec]

So even a clean installation with secureboot enabled during the install doesn't work ?

a) were you able to boot the LiveUSB with secureboot enabled ?

b) when does it stall to a black screen .. before or after the GRUB menu ?

[AndyInMokum]

Ups, thank you, Andy, for doing my work. I have forgotten do it.

No problem bud, have a fantastic weekend  .

[esjay]

So even a clean installation with secureboot enabled during the install doesn't work ?

a) were you able to boot the LiveUSB with secureboot enabled ?

b) when does it stall to a black screen .. before or after the GRUB menu ?

Hi there,

a) I could boot the LiveUSB with secureboot enabled. But I cannot boot the installed system with secureboot. Bizarr.
b) I press the start button, something begins (screen is black, but a little bit enlighted) and then nothing happens (secureboot enabled).

Secureboot disabled - all is running well.

[PCNetSpec]

Can you boot to the LiveUSB and post the output from

Code: [Select]

sudo fdisk -l

and

Code: [Select]

sudo blkid

and

Code: [Select]

efibootmgr -v

[esjay]

I will mark this issue as solved. After reading PCNetSpec´s post I have had the feeling that this might become pretty difficult - and it is.

I thought that there must be something that messed up grub. I downloaded openSUSE Tumbleweed, changed my bios to "secureboot enabled" and installed Tumbleweed without any issues. TW boots nicely on this machine, while all Ubuntu installations failed to boot in secureboot enabled right now. Why? No idea.

In my point of view it is a lack of a simple update coming to Ubuntu soon to make this laptop fit.

I have two other machines running on Peppermint 8 nicely. I will wait a few days and the third, running on Tumbleweed right now,  will be changed to Pepp  as well.

Thank you for your help.