Choose style:

Author Topic: Secure boot question (Solved)  (Read 996 times)

0 Members and 1 Guest are viewing this topic.

Offline esjay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 10
Secure boot question (Solved)
« on: March 08, 2018, 04:06:39 pm »
This is a pretty idiotic question. My system works and boots with secure boot disabled. Now I wanted to switch my bios settings back to secure boot enabled - and my  Pepp 8 did not boot. So I disabled secure boot and everything is fine again. Sorry for this, but there must be something simple to get my secure boot working again.
« Last Edit: March 09, 2018, 04:08:22 pm by esjay »

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25660
  • Karma: 2819
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: Secure boot question
« Reply #1 on: March 08, 2018, 04:15:55 pm »
what's the output from:
Code: [Select]
dpkg -l | grep signed
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline esjay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 10
Re: Secure boot question
« Reply #2 on: March 09, 2018, 12:10:54 am »
Morning, Sir! That is what I have thought about as well, but I am a noob in fixing it.

 
Code: [Select]
dpkg -l | grep signed
ii  fonts-opendyslexic                          20130616-1                                                  all          font designed to increase readability for readers with dyslexia
ii  fwupdate-signed                             1.11.3+0.5-2ubuntu7                                         amd64        Linux Firmware Updater EFI signed binary
ii  grub-efi-amd64-signed                       1.66.17+2.02~beta2-36ubuntu3.17                             amd64        GRand Unified Bootloader, version 2 (EFI-AMD64 version, signed)
ii  linux-signed-generic-hwe-16.04              4.13.0.36.55                                                amd64        Complete Signed Generic Linux kernel and headers
ii  linux-signed-image-4.13.0-32-generic        4.13.0-32.35~16.04.1                                        amd64        Signed kernel image generic
ii  linux-signed-image-4.13.0-36-generic        4.13.0-36.40~16.04.1                                        amd64        Signed kernel image generic
ii  linux-signed-image-generic-hwe-16.04        4.13.0.36.55                                                amd64        Signed Generic Linux kernel image
ii  shim                                        13-0ubuntu2                                                 amd64        boot loader to chain-load signed boot loaders under Secure Boot
ii  shim-signed                                 1.33.1~16.04.1+13-0ubuntu2                                  amd64        Secure Boot chain-loading bootloader (Microsoft-signed binary)
« Last Edit: March 09, 2018, 12:34:05 am by AndyInMokum, Reason: Encapsulating output with [code] »

Offline AndyInMokum

  • Global Moderator
  • Hero
  • *****
  • Posts: 4808
  • Karma: 1013
  • "Keep on Rockin' in the Free World"
    • View Profile
  • Peppermint version(s): PM 9 & PM 8 Respin-2 (64-bit)
Re: Secure boot question
« Reply #3 on: March 09, 2018, 01:04:50 am »
Hi esjay how's it going  :)?  Welcome to the Peppermint Forum.  It's very nice to meet you  ;).  This is the place to come for any issues or questions you have about your system.  There are no stupid questions here.  They're all important and we like to help  ;).

For future reference, could you please remember to encapsulate all terminal outputs with the Insert, Code # function.  For extra long outputs, please use the Spoiler, Sp function.  If you’re a Chromium Browser and/or a Google Chrome user, please don't combine these functions.  For some reason they don’t work well together with these browsers.  Only use one or the other  ;).  These forum functions preserve the original format of the output.  This makes it easier for future visitors to relate to their own issues.  These functions are found in the forum editor, above the,  :-[ Embarrassed and  the :'( Cry emoticon respectively.  Use the Preview button to check how it'll look in the forum.  This time, I've done it for you - many thanks  ;).

Backup! Backup! Backup! If you're missing any of these -  you ain't Backed Up!
For my system info please L/click HERE.

Offline esjay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 10
Re: Secure boot question
« Reply #4 on: March 09, 2018, 03:14:26 am »
Ups, thank you, Andy, for doing my work. I have forgotten do it.

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25660
  • Karma: 2819
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: Secure boot question
« Reply #5 on: March 09, 2018, 03:46:13 am »
Well that looks fine to me, so what exactly happens when you attempt to boot with secureboot enabled ?

Do you get any messages onscreen ?
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline esjay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 10
Re: Secure boot question
« Reply #6 on: March 09, 2018, 04:18:44 am »
Hi there,

well, the machine simply does not boot with secure boot enabled, black screen, nothing happens. I have had to shutdown the hard way, start again (directly into the bios settings, where I disable secure boot)  - and all is working fine. I have no explanation. I have reinstalled Pepp 8 three times yesterday to be sure, and then decided to post here.

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25660
  • Karma: 2819
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: Secure boot question
« Reply #7 on: March 09, 2018, 05:57:06 am »
So even a clean installation with secureboot enabled during the install doesn't work ?

a) were you able to boot the LiveUSB with secureboot enabled ?

b) when does it stall to a black screen .. before or after the GRUB menu ?
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline AndyInMokum

  • Global Moderator
  • Hero
  • *****
  • Posts: 4808
  • Karma: 1013
  • "Keep on Rockin' in the Free World"
    • View Profile
  • Peppermint version(s): PM 9 & PM 8 Respin-2 (64-bit)
Re: Secure boot question
« Reply #8 on: March 09, 2018, 06:07:57 am »
Ups, thank you, Andy, for doing my work. I have forgotten do it.

No problem bud, have a fantastic weekend  ;D.
Backup! Backup! Backup! If you're missing any of these -  you ain't Backed Up!
For my system info please L/click HERE.

Offline esjay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 10
Re: Secure boot question
« Reply #9 on: March 09, 2018, 08:11:39 am »
So even a clean installation with secureboot enabled during the install doesn't work ?

a) were you able to boot the LiveUSB with secureboot enabled ?

b) when does it stall to a black screen .. before or after the GRUB menu ?

Hi there,

a) I could boot the LiveUSB with secureboot enabled. But I cannot boot the installed system with secureboot. Bizarr.
b) I press the start button, something begins (screen is black, but a little bit enlighted) and then nothing happens (secureboot enabled).

Secureboot disabled - all is running well.


Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25660
  • Karma: 2819
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: Secure boot question
« Reply #10 on: March 09, 2018, 08:18:27 am »
Can you boot to the LiveUSB and post the output from
Code: [Select]
sudo fdisk -l
and
Code: [Select]
sudo blkid
and
Code: [Select]
efibootmgr -v
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline esjay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 10
Re: Secure boot question
« Reply #11 on: March 09, 2018, 04:05:13 pm »
I will mark this issue as solved. After reading PCNetSpec´s post I have had the feeling that this might become pretty difficult - and it is.

I thought that there must be something that messed up grub. I downloaded openSUSE Tumbleweed, changed my bios to "secureboot enabled" and installed Tumbleweed without any issues. TW boots nicely on this machine, while all Ubuntu installations failed to boot in secureboot enabled right now. Why? No idea.

In my point of view it is a lack of a simple update coming to Ubuntu soon to make this laptop fit.

I have two other machines running on Peppermint 8 nicely. I will wait a few days and the third, running on Tumbleweed right now,  will be changed to Pepp  as well.

Thank you for your help.