All Questions
Tagged with secure-boot debian
12
questions
1
vote
0
answers
99
views
How can I use unified kernel images with Ubuntu and Debian?
I would like to use unified kernel images (UKIs) and systemd-boot to take advantage of some of the hardware security features it provides (such as measured boot and real secure boot). I think that the ...
- 49
0
votes
1
answer
1k
views
Installing VirtualBox on Debian 12 Bookworm With Errors
I have a Clevo PD70SND-G, fresh from China. Installed Debian 12 Bookworm. I am attempting to install, and use, VirtualBox. I have data on a VirtualBox machine that I need access to.
I have attempted ...
0
votes
1
answer
553
views
Why can Debian 11 no longer load after Windows 10 changed motherboard state?
Note that this question is not a duplicate of the typical dual-boot questions, because I never have the Windows-HDD and Linux-SSD at once in the PC, so they cannot touch each other's (efi) partitions.
...
0
votes
0
answers
3k
views
Debian 11 - grub: Secure boot forbids loading module from (hd1,gpt5)/grub/x86_ 64-efi/exfat.mod
When booting up, my screen flashes with a bunch of errors, reporting that some grub modules couldn't be loaded due to Secure Boot, e.g.:
Secure boot forbids loading module from (hd1,gpt5)/grub/x86_ 64-...
- 161
1
vote
0
answers
318
views
Is it possible to allow only a certain secure USB boot media to boot an UEFI system?
I want to restrict all USB boot media from my system, except for a certain USB boot drive that I declare secure via a certain key.
Is this possible using UEFI/Secure Boot/TPM? Maybe via TPM? TPM gets ...
- 4,978
5
votes
0
answers
3k
views
Kernel lockdown disallows loading of an self-compiled and self-signed in-tree kernel module
I'm having difficulties loading a kernel module that I myself compiled and signed for Secure Boot. The module in question is ec_sys, located within drivers/acpi directory of the kernel tree.
I'm using ...
- 161
1
vote
1
answer
491
views
Machine owner key (MOK) details and predeployment options
Currently I am trying to get into the mechanisms behind Secure Boot, shim and machine owner keys.
What I observed is the fact, that the key, that I've imported via mokutil is permanent even if:
the ...
0
votes
1
answer
340
views
Install Debian Linux on a Fujitsu Esprimo D7010
After installing Debian Linux on a Fujitsu Esprimo D7010, there is no corresponding boot entry visible. The new Debian installation cannot be booted. It appears the problem is related to secure boot.
...
- 238
2
votes
0
answers
1k
views
secureboot with parrotOS - not able to sign custom kernel
I've installed Parrot OS on my surface and built the custom kernel for the surface from jakeday repo. I'm currently trying to sign my custom kernel that I can turn on secureboot again.
I've followed ...
- 21
24
votes
1
answer
9k
views
"update-secureboot-policy --enroll-key" running on every new startup eating resources
update-secureboot-policy --enroll-key seems to run whenever I start my computer and never stops running unless I manually kill the process. It makes my computer hot and uses lots of system resources. ...
- 341
0
votes
1
answer
940
views
How to install Kali Linux with Linux Foundation PreLoader?
I installed the latest Kali Linux on my notebook Lenovo X390 Yoga. I have dualboot with default installed Windows 10 x64. I need use Bitlocker for Windows 10 partition (I use it without TPM, only with ...
- 101
0
votes
0
answers
142
views
Is there a way to disable Secure Boot startup message?
So yesterday I disabled Secure Boot in order to run an undervolt software. I'm running Elementary OS on an Asus Q325UA laptop and when I reboot/cold start the system I get this message before the grub ...
