[SOLVED] integrity: Problem loading X.509 certificate -22

LabRicecat · 2023-09-10 09:38:42

Heya!
Today I installed arch linux (vanilla) manually with an USB on my laptop. I have installed arch linux multiple times before, but never ran into this problem. As always I followed the installation guide, setup Limine as my boot manager with the default configuration on their wiki page, and rebooted. Now when I want to boot into it, I get the limine screen as expected, but if I want to boot into my arch linux install, I get 2 messages:

sgx: There are zeri EPC sections
integrity: Problem loading X.509 certificate -22

After that, nothing happens, these messages stay on the screen until I turn off my laptop by force.
I installed the required packages, as well as `openssl` and `coreutils`. I also ran `pacman -Syyu` when `arch-chroot`-ing. (I used as of today the newest `.iso`, so it can't be an out-of-date error)

My partitions looks like this:

/dev/sda1 /boot
/dev/sda2 [SWAP]
/dev/sda3 /

Any idea what could have caused this/how I can fix this? A google search did not give me any useful results, if any at all.

Thanks a lot!

Last edited by LabRicecat (2023-09-10 13:06:14)

3beb6e7c46a615a · 2023-09-10 10:09:47

Did you setup a graphical environment during installation? Can you switch to another TTY, i.e. Ctrl+Alt+F3? The message might just have overwritten the login prompt.

The message looks as if the kernel fails to load a certificate, and the only place where certificates commonly exist for the kernel would be secure boot. Presumably your firmware/motherboard vendor installed some weird certificates into the secure boot DB. Just guessing tho, so not sure if the following helps:

First, try clear out secure boot state and update the firmware.

If that doesn't help, try to disable secure boot entirely, or switch to classic BIOS boot as a last resort.

Last edited by 3beb6e7c46a615a (2023-09-10 10:11:54)

LabRicecat · 2023-09-10 10:28:30

No I did not set up a graphical environment yet. Pressing Ctrl+Alt+F3 does nothing (i.e. nothing happens).
In the BIOS setting I already disabled secure boot, or more, it was never enabled in the first place. Seems to be the default.

How would you suggest I update the firmware? Is that something in the BIOS I need to do? (my second guess would be the `linux-firmware` package, but I doubt you mean that)

3beb6e7c46a615a · 2023-09-10 10:45:31

"Update the firmware" as in "update the BIOS". How you do that depends on the BIOS or motherboard vendor.

That said it looks as if you successfully installed Arch from the live ISO? How did you boot that? In EFI or BIOS mode?

Exit: You also might want to try a different kernel, eg linux-lts.

Last edited by 3beb6e7c46a615a (2023-09-10 10:47:10)

LabRicecat · 2023-09-10 10:50:16

Oh I see. I was currently trying `fwupd`, but that does not let me start a demon while `arch-chroot`ing.

Yes I successfully installed from the ISO. I simply put in the BIOS as boot option my hard drive as first entry, as it detected it.
It's EFI.

I will try to install the different kernel!

LabRicecat · 2023-09-10 10:58:37

I `arch-chroot`ed from my live USB into `/dev/sda3` (root), and ran `pacman -Sy linux-lts`, it ran the installation and setup, but on reboot the message is still there. Did I forgot to set something up or remove something?

3beb6e7c46a615a · 2023-09-10 11:14:04

Did you actually boot the LTS kernel, ie select it in the boot manager? Sorry if that's an obvious question, I just don't know where you are

LabRicecat · 2023-09-10 11:31:56

Oh whoops, I have forgotten to do that.
Also I seemed to installed it incorrectly, whoops.

In any case, I ran this:

pacman -R linux
pacman -S linux-lts linux-firmware base

And edited my boot manager config.

Now, the error message got... longer upon bootup. The original message still persists.
My retype:

<previous error shown above>
Kernel panic - not syncing: VFS: unable to mount root fs on unknown-block(0,0)
CPU: 5 PID: 1 Com: swapper/0 Not tainted 6.1.52-1-lts #1 <uuid>
Hardware: <my machine>
Call Trace:
   ....

Maybe do I need to redo my `fstab` ?

Last edited by LabRicecat (2023-09-10 11:40:06)

2ManyDogs · 2023-09-10 11:36:38

LabRicecat, markdown is not supported here. Please edit your posts and use [ code ] tags (not quote tags) when posting output. This makes the output easier to read and provides a scroll box for long output.

https://wiki.archlinux.org/title/Genera … s_and_code
https://bbs.archlinux.org/help.php#bbcode

LabRicecat · 2023-09-10 11:42:06

Sorry, I am new here. I edited my posts accordingly!

I now reran the

 genfstab

and

 mkinitcpio

with no success. Still the same message

seth · 2023-09-10 11:57:02

Call Trace:
   ....

Please don't paraphrase, https://bbs.archlinux.org/viewtopic.php?id=57855
In this case, linking a screenshot (dom't embed it here) is actually much better than some vague recap that skips the important parts

LabRicecat · 2023-09-10 12:16:39

Alright! Sorry for the broken screen, here is the image: https://imgur.com/a/ERJR56n

And again, I don't use forums that often, so please excuse that I am not used to this, I try my best.

seth · 2023-09-10 12:26:41

The grub.cfg is borked, there's probably no root parameter at all or it's wrong.
From the install is

lsblk -f
mount /dev/sda3 /mnt
ls /mnt/boot
mount /dev/sda1 /mnt/boot
ls /mnt/boot
cat /mnt/boot/limine.cfg

https://wiki.archlinux.org/title/Limine#Configuration
The "root-uuid" in "CMDLINE=root=UUID=root-uuid rw" is a placeholder

LabRicecat · 2023-09-10 12:29:30

I don't use GRUB tho, I use limine.

This is my limine.cfg

TIMEOUT=5

:Arch Linux
    PROTOCOL=linux
    KERNEL_PATH=boot:///vmlinuz-linux-lts
    CMDLINE=root=UUID=root-uuid rw
    MODULE_PATH=boot:///initramfs-linux.img

(again, a placeholder)

Edit: I realized you mentioned limine, my bad. Still I don't get what you try to tell me..

Last edited by LabRicecat (2023-09-10 12:30:52)

seth · 2023-09-10 12:30:35

Yeah, figured that midway through.

seth wrote:

The "root-uuid" in "CMDLINE=root=UUID=root-uuid rw" is a placeholder

Edit: not sure about your last line.
Post the actual file content and contrast that w/ the output of "lsblk -f"
Also make sure it's on the right partition (in case you're eg. not actually booting from sda1)

Edit #2:
If

CMDLINE=root=UUID=root-uuid rw

is literal, that's bogus. "root-uuid" is supposed to be an actual UUID

Last edited by seth (2023-09-10 12:32:54)

LabRicecat · 2023-09-10 12:37:14

I already posted the file content, and yes, "uuid" got replaced correctly and after just checking, still matches with /dev/sda3 as provided by lsblk.

Edit: Screenshot added: https://imgur.com/a/sYIZYUv

Last edited by LabRicecat (2023-09-10 12:40:03)

seth · 2023-09-10 12:39:38

I already posted the file content, and yes, "uuid" got replaced correctly

Only one of those things can be true and if it now looks like "CMDLINE=root=UUID=root-12345678-87654321-abcdefg-hijklm rw" that's still bogus which is why you're not supposed to post vague interpretations of data.

LabRicecat · 2023-09-10 12:41:06

I have no way of sending the file, so I looked it up, and made changed to the default. I now added a screenshot so this should be more clear now.

seth · 2023-09-10 12:42:26

cat /mnt/boot/limine.cfg | curl -F 'f:1=<-' ix.io

LabRicecat · 2023-09-10 12:43:00

I already sent it, as a screenshot, no?

seth · 2023-09-10 12:48:50

"cross-talk", can you boot the fallback initramfs?

LabRicecat · 2023-09-10 12:58:39

Sadly no, changing "boot:///initramfs-linux-lts.img" to "boot:///initramfs-linux-lts-fallback.img" yields the exact same error message as shown above.

LabRicecat · 2023-09-10 13:01:26

I uhm, found out why it's not working. I had a typo. I typed "MODULE-PATH" instead of "MODULE_PATH". It boots now into the tty!

Thanks a lot!!

Arch Linux

#1 2023-09-10 09:38:42

[SOLVED] integrity: Problem loading X.509 certificate -22

#2 2023-09-10 10:09:47

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#3 2023-09-10 10:28:30

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#4 2023-09-10 10:45:31

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#5 2023-09-10 10:50:16

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#6 2023-09-10 10:58:37

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#7 2023-09-10 11:14:04

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#8 2023-09-10 11:31:56

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#9 2023-09-10 11:36:38

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#10 2023-09-10 11:42:06

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#11 2023-09-10 11:57:02

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#12 2023-09-10 12:16:39

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#13 2023-09-10 12:26:41

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#14 2023-09-10 12:29:30

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#15 2023-09-10 12:30:35

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#16 2023-09-10 12:37:14

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#17 2023-09-10 12:39:38

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#18 2023-09-10 12:41:06

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#19 2023-09-10 12:42:26

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#20 2023-09-10 12:43:00

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#21 2023-09-10 12:48:50

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#22 2023-09-10 12:58:39

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

#23 2023-09-10 13:01:26

Re: [SOLVED] integrity: Problem loading X.509 certificate -22

Board footer