Bug#989962: debian-bullseye-DI-rc2-amd64-DVD-1.iso image on flash media flash fails to boot on a system that does not support secure boot

2021-06-28 Thread Steve McIntyre
[ please keep the bug report in CC, I'm not the only person who might be
  reading this! ]

On Sun, Jun 27, 2021 at 12:14:20PM -0700, David George Henderson III wrote:
>Steve,
>
>I goofed on the model number, its a T1600, not a T1200. I've created a text
>file from /proc/cpuinfo; see attachment.

ACK, thanks.

>The T1600 has a 11.rc1 system that installs OK but does not directly boot off
>the disk drive;
>
>    what does work is EFI booting  an existing Debian 10.9 system and placing
>the 11.rc1 grub stanza inside the 10.9 /etc/grub.d/40_custom file ;  see
>Bug#989962
>
>I have performed an 11.rc2 install via bios mode booting 11.rc2 media and
>performing an install without any use of EFI
>
>All my laptops boot in secure boot mode; this is greatly appreciated.
>
>I perform test installs to this T1600 system to emulate the laptop
>configuration.
>
>    What matters the most to me is the compiler/library configuration.
>
>    At the moment I'm using gnu gcc/g++ because the llvm and clang compilers
>on Debian 10 failed to execute some intricate c++ code.
>
>    In the big picture, it does not matter very much if the T1600 boots bios
>mode or UEFI mode.

Fair enough!

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
"You can't barbecue lettuce!" -- Ellie Crane



Bug#989962: debian-bullseye-DI-rc2-amd64-DVD-1.iso image on flash media flash fails to boot on a system that does not support secure boot

2021-06-28 Thread David George Henderson III

Steve,

I goofed on the model number, its a T1600, not a T1200. I've created a 
text file from /proc/cpuinfo; see attachment.


The T1600 has a 11.rc1 system that installs OK but does not directly 
boot off the disk drive;


    what does work is EFI booting  an existing Debian 10.9 system and 
placing the 11.rc1 grub stanza inside the 10.9 /etc/grub.d/40_custom 
file ;  see Bug#989962


I have performed an 11.rc2 install via bios mode booting 11.rc2 media 
and performing an install without any use of EFI


All my laptops boot in secure boot mode; this is greatly appreciated.

I perform test installs to this T1600 system to emulate the laptop 
configuration.


    What matters the most to me is the compiler/library configuration.

    At the moment I'm using gnu gcc/g++ because the llvm and clang 
compilers on Debian 10 failed to execute some intricate c++ code.


    In the big picture, it does not matter very much if the T1600 boots 
bios mode or UEFI mode.


David




On 6/17/21 5:27 PM, Steve McIntyre wrote:

Control: reassign -1 shim-signed
Control: reassign 989810 shim-signed

Hi David!

On Wed, Jun 16, 2021 at 01:50:51PM -0700, David George Henderson III wrote:

Package: grub-efi-amd64

The system is a Dell Precision T1200 E3, 16GB of memory,booting off
flash copy of debian-bullseye-DI-rc2-amd64-DVD-1.iso

Booting the rc2 version flash drive fails to go into the normal menus.

     (note bug 989810 my experiences with rc1 ; it installed as expected but
the installed system failed to boot)

The delivers the following messages and halts(I had only a few seconds to
capture the gist):

MoklistRT out of resources

MoklistXRT out of resources

import moc state() -- didn't have time to even get the gist of this error
message

OK. These messages are from shim, which runs before GRUB on a Secure
Boot setup. Your problem isn't that your system does not support
SB, it's just that it's running out of EFI variable storage
space. Shim is trying to store copies of some of its internal
variables, and that's failing. That's painful. :-(

Google is refusing to find me anything about your system, which is
surprising. Could you give me an idea of its age and the rest of its
specs please?

As a workaround for your installed system: if you're not wanting /
trying to use SB, you could try booting with older bullseye media in
Rescue mode. Get into the booted system and run

   # apt-get remove --purge shim-signed
   # grub-install

and that should let you get in OK after that.

processor   : 0
vendor_id   : GenuineIntel
cpu family  : 6
model   : 42
model name  : Intel(R) Xeon(R) CPU E31240 @ 3.30GHz
stepping: 7
microcode   : 0x2f
cpu MHz : 1600.719
cache size  : 8192 KB
physical id : 0
siblings: 8
core id : 0
cpu cores   : 4
apicid  : 0
initial apicid  : 0
fpu : yes
fpu_exception   : yes
cpuid level : 13
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ht tm pbe syscall nx rdtscp lm 
constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid 
aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr 
pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm 
epb pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid xsaveopt 
dtherm ida arat pln pts md_clear flush_l1d
vmx flags   : vnmi preemption_timer invvpid ept_x_only flexpriority 
tsc_offset vtpr mtf vapic ept vpid unrestricted_guest
bugs: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds 
swapgs itlb_multihit
bogomips: 6584.98
clflush size: 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor   : 1
vendor_id   : GenuineIntel
cpu family  : 6
model   : 42
model name  : Intel(R) Xeon(R) CPU E31240 @ 3.30GHz
stepping: 7
microcode   : 0x2f
cpu MHz : 1623.585
cache size  : 8192 KB
physical id : 0
siblings: 8
core id : 1
cpu cores   : 4
apicid  : 2
initial apicid  : 2
fpu : yes
fpu_exception   : yes
cpuid level : 13
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ht tm pbe syscall nx rdtscp lm 
constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid 
aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr 
pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm 
epb pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid xsaveopt 
dtherm ida arat pln pts md_clear flush_l1d
vmx flags   : vnmi preemption_timer invvpid ept_x_only flexpriority 
tsc_offset vtpr mtf vapic ept vpid unrestricted_guest
bugs: cpu_meltdown spectre_v1 spectre_v2 spec_store

Bug#989962: debian-bullseye-DI-rc2-amd64-DVD-1.iso image on flash media flash fails to boot on a system that does not support secure boot

2021-06-17 Thread Steve McIntyre
Control: reassign -1 shim-signed
Control: reassign 989810 shim-signed

Hi David!

On Wed, Jun 16, 2021 at 01:50:51PM -0700, David George Henderson III wrote:
>Package: grub-efi-amd64
>
>The system is a Dell Precision T1200 E3, 16GB of memory,booting off
>flash copy of debian-bullseye-DI-rc2-amd64-DVD-1.iso
>
>Booting the rc2 version flash drive fails to go into the normal menus.
>
>    (note bug 989810 my experiences with rc1 ; it installed as expected but
>the installed system failed to boot)
>
>The delivers the following messages and halts(I had only a few seconds to
>capture the gist):
>
>MoklistRT out of resources
>
>MoklistXRT out of resources
>
>import moc state() -- didn't have time to even get the gist of this error
>message

OK. These messages are from shim, which runs before GRUB on a Secure
Boot setup. Your problem isn't that your system does not support
SB, it's just that it's running out of EFI variable storage
space. Shim is trying to store copies of some of its internal
variables, and that's failing. That's painful. :-(

Google is refusing to find me anything about your system, which is
surprising. Could you give me an idea of its age and the rest of its
specs please?

As a workaround for your installed system: if you're not wanting /
trying to use SB, you could try booting with older bullseye media in
Rescue mode. Get into the booted system and run

  # apt-get remove --purge shim-signed
  # grub-install

and that should let you get in OK after that.

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
  Armed with "Valor": "Centurion" represents quality of Discipline,
  Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
  concord the digital world while feeling safe and proud.



Bug#989962: debian-bullseye-DI-rc2-amd64-DVD-1.iso image on flash media flash fails to boot on a system that does not support secure boot

2021-06-16 Thread David George Henderson III

Package: grub-efi-amd64

The system is a Dell Precision T1200 E3, 16GB of memory,booting off 
flash copy of debian-bullseye-DI-rc2-amd64-DVD-1.iso


Booting the rc2 version flash drive fails to go into the normal menus.

    (note bug 989810 my experiences with rc1 ; it installed as expected 
but the installed system failed to boot)


The delivers the following messages and halts(I had only a few seconds 
to capture the gist):


MoklistRT out of resources

MoklistXRT out of resources

import moc state() -- didn't have time to even get the gist of this 
error message