Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[John Blinka]

On Wed, May 12, 2021 at 9:01 AM Mike Kaliman  wrote:

> I think I had used the Gentoo live USB originally, although I've the
> gparted live USB as well. Sysrescue ought to work but I'm wondering if
> there's an issue with a missing GPU driver or something. Granted, id be
> surprised that both sysrescue and the Ubuntu server USBs are missing
> drivers.
>
> What is your graphics setup? Integrated? Dedicated?
>

Integrated intel.

John

>

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[John Blinka]

On Wed, May 12, 2021 at 9:04 AM Wols Lists  wrote:

> On 12/05/21 13:43, John Blinka
> >
> So what I guess *might* be happening is that there is a signed
> boot-loader on the "other OS" on CD, but because the gentoo boot loader
> is not signed, that's why it's not working ...
>
> So somehow you need to get your "other linux" booted again, get back
> into gentoo, and install a signed binary boot loader. Pain in the Arse!!!
>
> Cheers,
> Wol
>
>
> “Other OS” is a secure boot setting in the Asus bios. There has never been
*any* actual os running on this board, since I have never gotten anything
to boot.

I suspected that sysrescue and Gentoo do not have signed boot loaders on
their isos (does Gentoo even have isos? Haven’t used anything but sysrescue
in ages…).  That’s why I downloaded and tried the current Ubuntu server
iso, believing that it would have a signed boot loader.  That didn’t boot.

John

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[Mark Knecht]

On Wed, May 12, 2021 at 6:04 AM Wols Lists  wrote:
>
> On 12/05/21 13:43, John Blinka wrote:
> >
> >
> > On Tue, May 11, 2021 at 8:57 PM Mike Kaliman  > > wrote:
> >
> > I have an Asus TUF Gaming X570 and have the secure boot OS type as
> > "Other OS". I've been using rEFInd to dual boot with Windows.
> >
> >
> > So, this suggests that “Other OS” was sufficient to allow you to boot
> > some kind of Linux distro, which you then used to install Gentoo.  I
> > take that as proof of concept that what I’ve tried *ought* to work.
> >
> So what I guess *might* be happening is that there is a signed
> boot-loader on the "other OS" on CD, but because the gentoo boot loader
> is not signed, that's why it's not working ...
>
> So somehow you need to get your "other linux" booted again, get back
> into gentoo, and install a signed binary boot loader. Pain in the Arse!!!
>
> Cheers,
> Wol
>

I suspect the OP has seen these but I'll post them anyway in case they
haven't popped up yet:

https://wiki.gentoo.org/wiki/User:Sakaki/Sakaki%27s_EFI_Install_Guide/Creating_and_Booting_the_Minimal-Install_Image_on_USB#turn_off_secure_boot

https://wiki.gentoo.org/wiki/User:Sakaki/Sakaki%27s_EFI_Install_Guide/Configuring_Secure_Boot

I'm at the point where I'm looking at building a new machine and being a
long-time Asus user I'm pained seeing the pain being inflicted.

- Mark

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[Wols Lists]

On 12/05/21 13:43, John Blinka wrote:
> 
> 
> On Tue, May 11, 2021 at 8:57 PM Mike Kaliman  > wrote:
> 
> I have an Asus TUF Gaming X570 and have the secure boot OS type as
> "Other OS". I've been using rEFInd to dual boot with Windows.
> 
> 
> So, this suggests that “Other OS” was sufficient to allow you to boot
> some kind of Linux distro, which you then used to install Gentoo.  I
> take that as proof of concept that what I’ve tried *ought* to work.
> 
So what I guess *might* be happening is that there is a signed
boot-loader on the "other OS" on CD, but because the gentoo boot loader
is not signed, that's why it's not working ...

So somehow you need to get your "other linux" booted again, get back
into gentoo, and install a signed binary boot loader. Pain in the Arse!!!

Cheers,
Wol

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[Mike Kaliman]

I think I had used the Gentoo live USB originally, although I've the
gparted live USB as well. Sysrescue ought to work but I'm wondering if
there's an issue with a missing GPU driver or something. Granted, id be
surprised that both sysrescue and the Ubuntu server USBs are missing
drivers.

What is your graphics setup? Integrated? Dedicated?

On Wed, May 12, 2021, 8:43 AM John Blinka  wrote:

>
>
> On Tue, May 11, 2021 at 8:57 PM Mike Kaliman 
> wrote:
>
>> I have an Asus TUF Gaming X570 and have the secure boot OS type as "Other
>> OS". I've been using rEFInd to dual boot with Windows.
>>
>
> So, this suggests that “Other OS” was sufficient to allow you to boot some
> kind of Linux distro, which you then used to install Gentoo.  I take that
> as proof of concept that what I’ve tried *ought* to work.
>
> Thanks for that reassurance!
>
> John
>
>>

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[John Blinka]

On Tue, May 11, 2021 at 8:57 PM Mike Kaliman  wrote:

> I have an Asus TUF Gaming X570 and have the secure boot OS type as "Other
> OS". I've been using rEFInd to dual boot with Windows.
>

So, this suggests that “Other OS” was sufficient to allow you to boot some
kind of Linux distro, which you then used to install Gentoo.  I take that
as proof of concept that what I’ve tried *ought* to work.

Thanks for that reassurance!

John

>

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[John Blinka]

On Tue, May 11, 2021 at 6:49 PM  wrote:


>
> Try to  watch this clip it might help.
>
>
> https://www.google.com/search?sxsrf=ALeKk039uHXT9NuDloVx1Rvp0Mw3kBzEXg:1620773038736=asus+board+%22b560m%22+turn+off+secure+boot=X=2ahUKEwjSsfCJ2sLwAhXCpJ4KHdr6Bz4Q5t4CMAx6BAgeEA0=1263=660#kpvalbx=_ygibYJexK87E-gT-gLaYDw55
>
> Thanks for the additional resources.  Unfortunately, I’ve already tried
what these posts suggest, but without success.

John

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[Mike Kaliman]

I have an Asus TUF Gaming X570 and have the secure boot OS type as "Other
OS". I've been using rEFInd to dual boot with Windows.

On Tue, May 11, 2021, 6:49 PM  wrote:

> On 5/11/21 4:08 PM, John Blinka wrote:
> > Hello, Gentooers,
> >
> > I just acquired a new Asus board (b560m tuf gaming+wifi) to replace a
> failed gigabyte board on my main Gentoo machine.  Assembly went well, it
> powered up flawlessly first time, it recognized all the hardware... and
> then nothing.   Cannot get it to boot.
> >
> > On all my other machines, there’s a bios setting that allows me to turn
> off secure boot, which allows me to boot Sysrescue from usb, or Gentoo from
> a hard drive.
> >
> > Not so (as far as I can tell) on this mobo/bios.  There’s the usual bios
> boot menu and a secure boot submenu.  However, the secure boot submenu only
> allows me to select between Windows UEFI (with, presumably, secure boot
> enabled) and “other OS”.  I have no clue what “other OS” implies about
> secure boot.  It also offers the ability to accept the standard
> Microsoft-supplied secure boot keys, or to change or delete them.  There
> are a few claims on the web that clearing the PK key (and only that key) or
> clearing all of the keys is the way to turn off secure boot.   I’ve tried
> all the combinations; none of them allow me to boot.
> >
> > The farthest I’ve gotten is to display the Sysrescue usb boot choices.
> Selecting any of them seems to (briefly, for a second) start a boot and
> then the screen goes blank.  Nothing after that.
> >
> > I haven’t found any mention on the web that Asus boards are particularly
> linux hostile, nor much discussion implying that turning off secure boot is
> particularly tricky.  Most of what I’ve seen is, say, Ubuntu oriented.  I
> gather that they have gone through the process of getting their secure boot
> keys authorized by Microsoft.
> >
> > Anybody have success getting Gentoo to boot from a recent Asus mobo?
> >
> > Thanks!
> >
> > John Blinka
>
> Try to  watch this clip it might help.
>
>
> https://www.google.com/search?sxsrf=ALeKk039uHXT9NuDloVx1Rvp0Mw3kBzEXg:1620773038736=asus+board+%22b560m%22+turn+off+secure+boot=X=2ahUKEwjSsfCJ2sLwAhXCpJ4KHdr6Bz4Q5t4CMAx6BAgeEA0=1263=660#kpvalbx=_ygibYJexK87E-gT-gLaYDw55
>
>

Re: [gentoo-user] sysrescue+new asus mobo+secure boot=0

[thelma]

On 5/11/21 4:08 PM, John Blinka wrote:
> Hello, Gentooers,
> 
> I just acquired a new Asus board (b560m tuf gaming+wifi) to replace a failed 
> gigabyte board on my main Gentoo machine.  Assembly went well, it powered up 
> flawlessly first time, it recognized all the hardware... and then nothing.   
> Cannot get it to boot.
> 
> On all my other machines, there’s a bios setting that allows me to turn off 
> secure boot, which allows me to boot Sysrescue from usb, or Gentoo from a 
> hard drive.
> 
> Not so (as far as I can tell) on this mobo/bios.  There’s the usual bios boot 
> menu and a secure boot submenu.  However, the secure boot submenu only allows 
> me to select between Windows UEFI (with, presumably, secure boot enabled) and 
> “other OS”.  I have no clue what “other OS” implies about secure boot.  It 
> also offers the ability to accept the standard Microsoft-supplied secure boot 
> keys, or to change or delete them.  There are a few claims on the web that 
> clearing the PK key (and only that key) or clearing all of the keys is the 
> way to turn off secure boot.   I’ve tried all the combinations; none of them 
> allow me to boot.
> 
> The farthest I’ve gotten is to display the Sysrescue usb boot choices.  
> Selecting any of them seems to (briefly, for a second) start a boot and then 
> the screen goes blank.  Nothing after that.
> 
> I haven’t found any mention on the web that Asus boards are particularly 
> linux hostile, nor much discussion implying that turning off secure boot is 
> particularly tricky.  Most of what I’ve seen is, say, Ubuntu oriented.  I 
> gather that they have gone through the process of getting their secure boot 
> keys authorized by Microsoft.
> 
> Anybody have success getting Gentoo to boot from a recent Asus mobo?
> 
> Thanks!
> 
> John Blinka

Try to  watch this clip it might help.

https://www.google.com/search?sxsrf=ALeKk039uHXT9NuDloVx1Rvp0Mw3kBzEXg:1620773038736=asus+board+%22b560m%22+turn+off+secure+boot=X=2ahUKEwjSsfCJ2sLwAhXCpJ4KHdr6Bz4Q5t4CMAx6BAgeEA0=1263=660#kpvalbx=_ygibYJexK87E-gT-gLaYDw55

[gentoo-user] sysrescue+new asus mobo+secure boot=0

[John Blinka]

Hello, Gentooers,

I just acquired a new Asus board (b560m tuf gaming+wifi) to replace a
failed gigabyte board on my main Gentoo machine.  Assembly went well, it
powered up flawlessly first time, it recognized all the hardware... and
then nothing.   Cannot get it to boot.

On all my other machines, there’s a bios setting that allows me to turn off
secure boot, which allows me to boot Sysrescue from usb, or Gentoo from a
hard drive.

Not so (as far as I can tell) on this mobo/bios.  There’s the usual bios
boot menu and a secure boot submenu.  However, the secure boot submenu only
allows me to select between Windows UEFI (with, presumably, secure boot
enabled) and “other OS”.  I have no clue what “other OS” implies about
secure boot.  It also offers the ability to accept the standard
Microsoft-supplied secure boot keys, or to change or delete them.  There
are a few claims on the web that clearing the PK key (and only that key) or
clearing all of the keys is the way to turn off secure boot.   I’ve tried
all the combinations; none of them allow me to boot.

The farthest I’ve gotten is to display the Sysrescue usb boot choices.
Selecting any of them seems to (briefly, for a second) start a boot and
then the screen goes blank.  Nothing after that.

I haven’t found any mention on the web that Asus boards are particularly
linux hostile, nor much discussion implying that turning off secure boot is
particularly tricky.  Most of what I’ve seen is, say, Ubuntu oriented.  I
gather that they have gone through the process of getting their secure boot
keys authorized by Microsoft.

Anybody have success getting Gentoo to boot from a recent Asus mobo?

Thanks!

John Blinka