Arch Linux

joaomendonca

Member

From: Portugal

Registered: 2023-09-20

Posts: 18

grub-btrfs with secure boot enabled?

Hello everyone, I have a computer with 2 drives and a dual-boot setup with windows + arch. The arch build is installed on a drive with btrfs and windows on a separate drive. I'm using grub as a boot loader (grub-btrfs).

When I turn on secure boot, grub will show an error and won't boot. Has anyone been through this problem before and solved it? What am I missing here? I just want to be able to turn on secure boot and be able to boot into windows or arch with btrfs hopefully with my current grub setup.

Thanks for any feedback in advance.

EDIT:

The behaviour when turning on the secure boot is it turns on, shows a red box from grub saying "Secure boot Violation" "Invalid signature detected. Check secure boot policies in setup" and the only option I have is pressing "OK" and it automatically boots into my other drive with windows on it (I supose because of the BIOS boot order)

[SOLVED] some helpful resources on the thread

Last edited by joaomendonca (2024-01-16 14:02:10)

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,727

Re: grub-btrfs with secure boot enabled?

Have you read through https://wiki.archlinux.org/title/GRUB#S … ot_support and https://wiki.archlinux.org/title/Unifie … ecure_Boot ?

d.ALT

Member

Registered: 2019-05-10

Posts: 959

Re: grub-btrfs with secure boot enabled?

<EDIT>
Such a snail I am...
</EDIT>

grub will show an error

Which?

Last edited by d.ALT (2024-01-12 13:49:48)

---

<49,17,III,I>    Fama di loro il mondo esser non lassa;
<50,17,III,I>    misericordia e giustizia li sdegna:
<51,17,III,I>    non ragioniam di lor, ma guarda e passa.

joaomendonca

Member

From: Portugal

Registered: 2023-09-20

Posts: 18

Re: grub-btrfs with secure boot enabled?

Have you read through https://wiki.archlinux.org/title/GRUB#S … ot_support and https://wiki.archlinux.org/title/Unifie … ecure_Boot ?

I did briefly, but it looks like I'll have to completely redo my grub instalation/setup which was a pain (with btrfs support) and I'm afraid I don't have the 2 days to spare to play around with it before having my machine ready for work so i decided to come by and ask if someone had been in my shoes before to try and potentially shortcut my way through the challenge.

<EDIT>Such a snail I am...</EDIT>joaomendonca wrote: grub will show an error Which?

The behaviour is it turns on, shows a red box from grub saying "Secure boot Violation" "Invalid signature detected. Check secure boot policies in setup" and the only option I have is pressing "OK" and it automatically boots into my other drive with windows on it (I supose because of the BIOS boot order)

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,727

Re: grub-btrfs with secure boot enabled?

Yes, setting up Secure Boot is somewhat involved. Nobody can shortcut that for you.

joaomendonca

Member

From: Portugal

Registered: 2023-09-20

Posts: 18

Re: grub-btrfs with secure boot enabled?

Yes, setting up Secure Boot is somewhat involved. Nobody can shortcut that for you.

I will wait to see if someone who knows what they're doing catches onto this one and gives me a few helpful bumps in the right direction instead of asking me to "read the docs" multiple times, but I appreciate your pertinent contribution to the matter Scimmia, thanks.

Head_on_a_Stick

Member

From: The Wirral

Registered: 2014-02-20

Posts: 9,003

Website

Re: grub-btrfs with secure boot enabled?

We don't really do spoon-feeding here. If we had to read the dox so should you

Having said that unified kernel images offer a very simple way to enable SecureBoot, and certainly easier than with GRUB. Here's my method: https://bbs.archlinux.org/viewtopic.php … 7#p2138907

It's not in the wiki yet, I'll probably add it at some point though.

---

Jin, Jîyan, Azadî

joaomendonca

Member

From: Portugal

Registered: 2023-09-20

Posts: 18

Re: grub-btrfs with secure boot enabled?

We don't really do spoon-feeding here. If we had to read the dox so should you

Having said that unified kernel images offer a very simple way to enable SecureBoot, and certainly easier than with GRUB. Here's my method: https://bbs.archlinux.org/viewtopic.php … 7#p2138907

It's not in the wiki yet, I'll probably add it at some point though.

Didn't know about unified kernel images. Appreciate the tip.

I'll need to postpone this "problem" till next week, but I'll reserve some free time to try harder and get it solved asap. As a last resource I'll just wipe everything out, and will probably take the chance to try nixos (found some resources that sell it very well for my workflow / setup and shouldn't be hard to install it with UEFI enabled).