fsmithred | Has anyone gotten any of our isos to boot with secure boot enabled? It's not working here. | 16:08 |
---|---|---|
Xenguy | fsmithred: Is "secure boot" that 'UEFI' thing, or whatever? | 18:16 |
fsmithred | Xenguy, yes uefi that requires signed bootloader. | 18:40 |
fsmithred | signed = approved by the Redmond Lords | 18:41 |
Xenguy | fsmithred: Is it better for people running Linux to just turn UEFI off, or are there use cases where leaving it activated would be preferable? | 19:07 |
Xenguy | I always use 'legacy' BIOS myself | 19:08 |
fsmithred | Xenguy, some motherboards might not do legacy bios, some keep uefi with or without secure boot for dual boot with windows | 19:39 |
fsmithred | some *people* keep... | 19:42 |
Xenguy | fsmithred: Thanks, makes sense | 20:15 |
mason | Xenguy: You can enroll your own keys, thus not depending on Redmond or anyone else - you can sign your own stuff, which is arguably way more secure than using a default key and signature from anyone else. | 20:44 |
mason | Xenguy: look at "mokutil" | 20:46 |
Xenguy | mason: Will do | 20:49 |
mason | Xenguy: I want to play with it some, but most of my hardware is old enough to not support SecureBoot. | 20:50 |
mason | I expect at some point in the future I'll have an opportunity. | 20:50 |
Xenguy | I have no hardware that does not offer an option to avoid it so far, so that's what I've done up to now | 20:55 |
* fsmithred is getting very pissed off | 21:53 | |
fsmithred | something is fucked up | 21:53 |
fsmithred | ok, I guess I'm making progress. I installed on uefi with the desktop-live. | 22:02 |
fsmithred | If I boot the live-usb, chroot into the installed system, purge grub-efi-amd64-signed, run update-initramfs -u, grub-install, and update-grub, I can now get to the boot menu. Before I was only getting a grub prompt. | 22:04 |
fsmithred | Now it seems to be hanging at Loading initial ramdisk ... | 22:04 |
fsmithred | if I remove grub-efi-amd64-signed in the live session and then install the system, I get the boot menu right away. That's because $prefix is right. It points to the root partition instead of the efi partition like it did with the signed grub. | 22:24 |
fsmithred | But it still hangs at Loading initial ramdisk | 22:25 |
rrq | fsmithred: could you scope "out isos" more specifically? | 23:38 |
rrq | well, my special interest is in beowulf 3.1.0 installer isos of course | 23:40 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!