Re: x86_64: grub-install for secure boot

2023-07-27 Thread Randy Goldenberg
grub is typically installed in /boot, and the efi directory is typically mounted at /boot/efi, which is where UEFI firmware looks for the EFI executable to load. Following the same pattern, if grub is being installed in media/sdb1, the efi directory would be /media/sdb1/efi. I don't know if this

Re: x86_64: grub-install for secure boot

2023-07-27 Thread Zvi Vered
Hi Randy, My goal is to install grub2 in sdb1 that will work when secured boot is enabled. I don't have any restrictions on the files tree in /dev/sdb1. Can you please tell me what sequence I should use ? Especially the grub-install parameters. I'm running the installation under knoppix 9.1

Re: x86_64: grub-install for secure boot

2023-07-27 Thread Andrei Borzenkov
On 27.07.2023 21:44, Zvi Vered wrote: Hello, I'm trying to install grub 2.x for secure boot . I did the following steps under knoppix 9.1 : mkfs.fat -F32 /dev/sdb1 mount -t vfat /dev/sdb1 /media/sdb1 apt-get install grub-efi-amd64-signed grub-install --boot-directory=/media/sdb1/boot

Re: x86_64: grub-install for secure boot

2023-07-27 Thread Zvi Vered
Hi Randy, Thank you for your reply. Did you mean that the grub-install should be: grub-install --boot-directory=/media/sdb1/boot --efi-directory=/media/sdb1/boot --uefi-secure-boot ? This way, /media/sdb1 contains only the boot directory. boot directory contains 'ÉFI' and 'grub' After this

Re: x86_64: grub-install for secure boot

2023-07-27 Thread Zvi Vered
Hi Pascal, Thank you for your reply. shim-signed is installed. The output of: apt list --installed | grep shim is: shim-helpers-i386-signed/stable,testing,unstable,now 1+15.7+1 i386 [installed,automatic] shim-signed-common/stable,stable,testing,testing,unstable,unstable,now 1.39+15.7-1 all

Re: x86_64: grub-install for secure boot

2023-07-27 Thread Randy Goldenberg
If the boot directory is /media/sdb1/boot, it seems odd for the efi directory to be the parent directory, rather than /media/sdb1/boot/efi. On Thu, Jul 27, 2023 at 12:54 PM Zvi Vered wrote: > > Hello, > > I'm trying to install grub 2.x for secure boot . > I did the following steps under knoppix

Re: x86_64: grub-install for secure boot

2023-07-27 Thread Pascal Hambourg
Hello, On 27/07/2023 at 20:44, Zvi Vered wrote: I'm trying to install grub 2.x for secure boot . I did the following steps under knoppix 9.1 : mkfs.fat -F32 /dev/sdb1 mount -t vfat /dev/sdb1 /media/sdb1 apt-get install grub-efi-amd64-signed grub-install --boot-directory=/media/sdb1/boot

x86_64: grub-install for secure boot

2023-07-27 Thread Zvi Vered
Hello, I'm trying to install grub 2.x for secure boot . I did the following steps under knoppix 9.1 : mkfs.fat -F32 /dev/sdb1 mount -t vfat /dev/sdb1 /media/sdb1 apt-get install grub-efi-amd64-signed grub-install --boot-directory=/media/sdb1/boot --efi-directory=/media/sdb1 --uefi-secure-boot