Control: reassign -1 src:grub2

On Fri, Apr 14, 2023 at 04:35:22PM +0200, Pascal Hambourg wrote:
>Package: src:shim
>Version: 15.7-1
>
>Dear maintainer,
>
>I have an HP Elitebook 2570p laptop with flawed UEFI firmware which ignores
>EFI boot variables in NVRAM for booting and boots from the removable media
>path by default. So I installed a copy of GRUB in the removable media path
>with:
>
># grub-install --force-extra-removable
>
>Secure boot is enabled in UEFI/BIOS settings.
>For a test I wanted to disable secure boot validation in shim with:
>
># mokutil --disable-validation
>
>and rebooted. At boot, the following error is displayed:
>
>  Failed to open mmx64.efi - Not Found
>  Failed to load image: Not Found
>  Failed to start MOK Manager : Not Found
>
>and the laptop shut down after a couple of seconds.
>Indeed /EFI/BOOT on the EFI system partition contains only BOOTX64.EFI,
>grubx64.efi and fbx64.efi.
>Now the same happens every time I reboot from the removable media path,
>either on the hard disk or on a USB drive with a Debian installation image.
>
>Not sure which software is to blame here.
>
>- grub-install which does not install the MOK manager into the removable
>media path ?

This is definitely a bug in grub-install, yeah. Re-assigning it
accordingly.

>- shim which shuts down the laptop instead of just ignoring the validation
>change request if it does not find the MOK Manager ?

shim is designed to be paranoid (here and elsewhere). There isn't a
*good* choice for it here IMHO. :-/

-- 
Steve McIntyre, Cambridge, UK.                                st...@einval.com
"This dress doesn't reverse." -- Alden Spiess

Reply via email to