Arch Linux

cb951303

Member

Registered: 2007-03-17

Posts: 92

[SOLVED] Messed up my boot manager

Long story short, I've been trying to enable secure boot for my Arch installation but I've changed my mind. Only now I can't boot even when "secure boot" is disabled in BIOS settings.
So basically I'm trying to reset everything back to how it was.

I have  a GPT partition table with an un-encrypted boot partition.

Things I've tried:

• Boot to live USB arch env

• Mount / and /boot

• arch-chroot to it

• Remove everything from EFI via efibootmgr *Bb XXXX

• Reinstall grub via grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB

• Ignore message saying that there are no /boot/efikeys and that I should use cryptboot-efikeys to create and enroll some

• Double check via efibootmgr that the GRUB entry is there

• Select GRUB in BIOS setup

No luck!

Then I've also tried to create the efikeys (although I don't understand why it wants me to since I'm not going to use secure boot) with the recommended method. Didn't get any warnings this time but still no luck.

Any ideas what else I can try?

Best

Last edited by cb951303 (2022-06-16 19:28:14)

cb951303

Member

Registered: 2007-03-17

Posts: 92

Re: [SOLVED] Messed up my boot manager

I've also noticed that I might have deleted some necessary files. Namely, there is no more a folder called /boot/EFI/boot but only /boot/EFI/EFI/GRUB (which I believe was created by efıbootmgr and has the grubx64.efi file in it)

Head_on_a_Stick

Member

From: The Wirral

Registered: 2014-02-20

Posts: 9,003

Website

Re: [SOLVED] Messed up my boot manager

Ignore message saying that there are no /boot/efikeys and that I should use cryptboot-efikeys to create and enroll some

Looks like you have cryptboot installed, which does this:

  install -Dm755 grub-install "$pkgdir/usr/local/bin/grub-install"

Remove the package immediately. That is just awful.

Double check via efibootmgr that the GRUB entry is there

Can we see that?

efibootmgr -uv | curl -F 'f:1=<-' ix.io  # post the returned URL

there is no more a folder called /boot/EFI/boot

Does the system boot if you copy /EFI/GRUB/grubx64.efi to /EFI/Boot/bootx64.efi (both paths given relative to the EFI system partition)?

---

Jin, Jîyan, Azadî

cb951303

Member

Registered: 2007-03-17

Posts: 92

Re: [SOLVED] Messed up my boot manager

Wow. All my problems were actually caused by cryptboot package... It somehow messed up all the signatures.
Once I uninstalled it, ran grub-install and tried to do the shim secure boot I could actually boot to a grub rescue for the first time.
Then I've found out that the latest grub package has a bug. Downgraded and now secureboot works!
Thanks a lot.