Package: grub-pc
Version: 2.02~beta2-26
Severity: important
I cant seem to get grub v2.02 (i386?) to take to using a password to restrict
users from editing boot options.
Im using method posted online from an ubuntu forum.The instructions seem
relevant and all of the files it references seem to be present on the system.
When I use the 00_header file, I get password and password_pbkdf2 cannot be
found errors.Otherwise I follow these instructions.
sudo grub-mkpasswd-pbkdf2
ENTER password TWICE.
(It will spew out some hash for you.)
sudo nano /etc/grub.d/40_custom
add:
set supervisors=""
password_pbkdf2
sudo update-grub
sudo reboot
Problem is I can still edit the boot options, even though this way, things
succeed.Its as if no password is set.
Furthermore my setup is forced into ro mode, kind of borking everything from
working when this occurs. I have to force rw mode to properly boot the system.
I cannot follow grub-install option either.
Installing for i386-pc platform.
grub-install: warning: File system `ext2' doesn't support embedding.
grub-install: warning: Embedding is not possible. GRUB can only be installed
in this setup by using blocklists. However, blocklists are UNRELIABLE and
their use is discouraged..
grub-install: error: will not proceed with blocklists.
This is an EXT4 system and its 64BIT. I had to force install in 32bit mode to
get Linux to take on this hardware.
-- Package-specific info:
*** BEGIN /proc/mounts
/dev/sda1 / ext4 rw,relatime 0 0
*** END /proc/mounts
*** BEGIN /boot/grub/grub.cfg
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.0.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages grub-pc depends on:
ii debconf [debconf-2.0] 1.5.57
ii grub-common2.02~beta2-26
ii grub-pc-bin2.02~beta2-26
ii grub2-common 2.02~beta2-26
ii ucf3.0030
grub-pc recommends no packages.
grub-pc suggests no packages.
-- debconf information:
grub-pc/install_devices_failed: false
grub-pc/install_devices_failed_upgrade: true
grub-pc/disk_description:
* grub-pc/install_devices: /dev/disk/by-id/ata-ST2000DX001-1CM164_Z1E7TKTH
grub-pc/chainload_from_menu.lst: true
grub2/force_efi_extra_removable: false
grub-pc/kopt_extracted: false
* grub2/linux_cmdline_default: quiet
grub-pc/timeout: 5
grub-pc/hidden_timeout: false
grub-pc/install_devices_empty: false
grub-pc/mixed_legacy_and_grub2: true
grub2/kfreebsd_cmdline:
grub-pc/partition_description:
grub-pc/install_devices_disks_changed:
grub-pc/postrm_purge_boot_grub: false
grub2/kfreebsd_cmdline_default: quiet
grub2/device_map_regenerated:
* grub2/linux_cmdline:
