On 27/11/22 15:25, Stephen Morris wrote:
On 23/11/22 18:22, Samuel Sieb wrote:
On 11/22/22 22:45, Stephen Morris wrote:
On 23/11/22 12:04, Samuel Sieb wrote:
On 11/20/22 23:54, Stephen Morris wrote:
I am getting the following error message displayed before the
display of the grub boot menu, can someone explain to me what this
means and why it is occurring in F37 when it was never produced in
F36, and what I need to do to rectify it?
error:
../../grub-core/kern/efi/sb.c:169:prohibited by secure boot policy
That's not a file you'll find on your system. That's just
identifying where in the grub code that the error message is coming
from. As you say the grub-gfxmode command isn't working now, I
would assume that's what is causing the error message because it's
not allowed with secure boot enabled. You most likely have to stay
with the graphics mode that is initialized by the BIOS.
Thanks Samuel. Are you saying that grub command is not allowed if
F37 because F37 is now booting via grub with full secure boot
enabled, whereas with the way F36 booted that grub command was
honoured and the menus and theme were displayed in that resolution
with full secure boot enabled?
That was just a guess and I think it was wrong now. I checked the
source and that error message is related to file loading. I would
have to see your config file to make a guess about what file it was
trying to load.
I backed the fix out and disabled the testing repository, which backed
grub out to 2.06.63. I did a further backout which backed grub out to
2.06.58 which supposedly doesn't have the issue, but a rebuild of
grub.cfg and reboot still displayed the message, still ignored the
specified resolution and ignored the gfxterm specification because it
is still not displaying the theme. I could try switching to the breeze
them with is supplied in the repositories.
After the boot, I issued sudo dnf upgrade --refresh grub2\* to
reinstall the offending grub version, but that installed grub 2.06.67,
which was the version in the testing repositories, so it looks like it
has been migrated to the "stable" repositories even though the
bugzilla entry was indicating they may not be up to scratch. Having
gone back to this version of grub it looks like the message is being
produced for all 6 fonts the theme is loading.
Does anyone have any ideas on how to sign the fonts?
I have now found from playing around with these settings and loading the
grub breeze theme that came from the fedora repositories, that the fonts
used by that theme are not signed to secure boot's satisfaction either.
I am also raising in another thread the observations that with grub2
2.06.67 grub has gone back to using /boot/efi/EFI/fedora/grub.cfg
instead of /boot/grub2/grub.cfg.
regards,
Steve
regards,
Steve
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
