Quantcast
Viewing all articles
Browse latest Browse all 2901

System and Network configuration • Re: Mokutil - This system doesn't support Secure Boot

Hello,
in order to use secureboot with the liquorix kernel I made a self-signed certificate, today I made a new one and after a reboot when I type the command:

Code:

mokutil --sb-state
it returns
This system doesn't support Secure Boot
but it does.
Afterwards when I enable or disable secureboot in bios the kernel with/without signature still goes through
Any idea how to fix that?
What is your installed Debian version and installed/user kernel version ? You can verify with the following command:

Code:

cat /etc/debian_versionuname -a
What is the list of loaded kernel modules ? You can verify with the following command:

Code:

lsmod
A message like the one you reported should be generated here [1] in the source code of the mokutil command:

Code:

[..]if (sb_check) {/* Check whether the machine supports Secure Boot or not */int rc;uint8_t *data = NULL;size_t data_size;uint32_t attributes;rc = efi_get_variable (efi_guid_global, "SecureBoot",       &data, &data_size, &attributes);if (rc < 0) {fprintf(stderr, "This system doesn't support Secure Boot\n");ret = -1;goto out;}free (data);}[..]
As you can see, the mokutil command checks for an EFI variable named "SecureBoot", which it cannot find.

Can you boot with the Debian kernel (not the Liquorix kernel) and see if the problem still occurs?

What is the output of the following command withDebian and other kernels ?

Code:

efivar
--
[1] https://sources.debian.org/src/mokutil/ ... 2116#L2116

Statistics: Posted by Aki — 2024-04-30 23:24



Viewing all articles
Browse latest Browse all 2901

Trending Articles