Re: x86_64: grub-install for secure boot

2023-07-29 Thread Randy Goldenberg
Instructions for installing Knoppix on a USB stick are available at https://www.knopper.net/knoppix/knoppix910-en.html. The article above includes a link to instructions for inserting the signed checksum of the Linux bootloader in the UEFI firmware, necessary when booting for the first time.

grub2.x: error: bad shim signature when loading kernel

2023-07-29 Thread Zvi Vered
Hello, After selecting the menuentry pointing to the signed kernel I got: error: bad shim signature Should I modify my grub.cfg (attached) to support signed kernel image ? Should I sign grub.cfg (which I created and edited manually) ? Thank you, Zvika grub.cfg Description: Binary data

Re: x86_64: grub-install for secure boot

2023-07-29 Thread Pascal Hambourg
On 29/07/2023 at 06:56, Zvi Vered wrote: When I tried to sign my kernel with mokutil under knoppix (secure boot = enabled) I got the "EFI variables are not supported on this system" again. modprobe efivarfs mount -t efivarfs efivarfs /sys/firmware/efi/efivars After those 2 steps, mokutil

Re: x86_64: grub-install for secure boot

2023-07-29 Thread Andrei Borzenkov
On 28.07.2023 22:04, Pascal Hambourg wrote: On 28/07/2023 at 20:13, Zvi Vered wrote: You wrote: "Most likely the system was booted in legacy BIOS mode" I don't think so. grub-install would have selected the i386-pc target instead of x86_64-efi. --uefi-secure-boot option may implicitly set