Arch Linux

cjdb

Member

Registered: 2015-07-04

Posts: 4

Surface Pro 3 Secure Boot using rEFInd doesn't find vmlinux-linuz

I've recently bought a Surface Pro 3 (3 days ago) and have installed Arch on it without any major hiccups. I'm now trying to get my OS to boot using Secure Boot enabled using rEFInd, however, rEFInd can't seem to find vmlinuz-linux unless Secure Boot is turned off.

My partition table looks something like this:

/dev/sda1 -- Microsoft recovery
/dev/sda2 -- EFI partition (vfat)
/dev/sda3 -- Microsoft reserved
/dev/sda4 -- Windows (NTFS)
/dev/sda5 -- Common partition (NTFS)
/dev/sda6 -- Arch (ext4)
/dev/sda7 -- Microsoft recovery

efibootmgr order:

PreLoader (/dev/sda2)
rEFInd (/dev/sda2)
Windows (/dev/sda2)
vmlinuz-linux (/dev/sda6, not sure if this one is necessary)
USB (unknown)

sda2 has all the Windows and rEFInd .efi files, including PreLoader and HashTool. I've verified a handful of efi files, including vmlinuz-linux.
Unfortunately, vmlinuz-linux wants to be on sda6, else it complains about its VFS missing (a possible recompile could fix this?).
My bootable USB is also showing up on rEFInd (not sure why, but I did use HashTool to get it set up in the first place), so I use archiso + arch-chroot to get to my copy of Arch while in Secure Boot right now.

rEFInd was installed using

$ refind-install --alldrivers

This has been a pain in the ass to set up, but I think all I need to do is to tell rEFInd where to look for vmlinuz-linux and I'm done. This is proving to be easier said than done.
There's probably a lot more data I can provide: I am aware of this. What I'm not sure about is what I should supply, and what will contribute to useless junk.

Sources I've consulted along the way (and possibly misunderstood at times):

https://wiki.archlinux.org/index.php/Mi … face_Pro_3
https://wiki.archlinux.org/index.php/Un … ecure_Boot
http://www.rodsbooks.com/efi-bootloader … eboot.html
https://github.com/hugo19941994/Arch-on-SP1
http://www.rodsbooks.com/refind/
http://www.rodsbooks.com/efi-bootloader … ation.html
https://bbs.archlinux.org/viewtopic.php?id=169809

Cheers,

Chris

cjdb

Member

Registered: 2015-07-04

Posts: 4

Re: Surface Pro 3 Secure Boot using rEFInd doesn't find vmlinux-linuz

It turns out that the drivers that rEFInd comes with weren't registered using HashTool. Now that I've done that, it works fine
I found this out by manually configuring rEFInd to look on /dev/sda6.

Would anyone have an issue if I modded the wiki to update with my findings? I had a lot of trouble using gummiboot (even with SecureBoot off), but rEFInd turned out to be quite alright, and even lets you use the TypeCover 3 if you reboot from Windows.