Arch Linux

charged

Member

From: Ontario

Registered: 2025-06-06

Posts: 10

Website

Can't reset sbctl

In the simplest form, running `sbctl reset` returns the following:

could not reset PK: couldn't write efi variable: write /sys/firmware/efi/efivars/PK-8be4df61-93ca-11d2-aa0d-00e098032b8c: input/output error

I checked the folder and this file doesn't exist, however a similar file does exist called `PKDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c`, but I'm not sure if it's related.

sbctl status

confirms I'm in setup mode.

The reason why I'm resetting is due to a BIOS update that no longer recognized grub, which after fixing broke my secure boot setup.

Is there any way to resolve this? Any help appreciated.

cryptearth

Member

Registered: 2024-02-03

Posts: 1,730

Re: Can't reset sbctl

Is there any way to resolve this?

not using secureboot - as in: what does secureboot protect against anyway?
in its most basic form all it ensures is that the bootcode has to result in a hash that's known to the firmware - that's it ... and it ain't much
sure, this COULD be extented - but as far as I'm aware only to the kernel and initrd the bootcode loads and start ...

... and from there? neither windows nor linux enforce this chain any further into userland: you can still download any stuff from the internet or even write your own - and there's nothin stopping you

and even if: it's your system, you're the admin and if required you can grant execution permission to everything

so - against what exactly does secureboot protect you?
unless you can give any answer to this I wouldn't bother with this crap - just wipe the keys and use your computer as you like

charged

Member

From: Ontario

Registered: 2025-06-06

Posts: 10

Website

Re: Can't reset sbctl

Is there any way to resolve this?

not using secureboot - as in: what does secureboot protect against anyway?
in its most basic form all it ensures is that the bootcode has to result in a hash that's known to the firmware - that's it ... and it ain't much
sure, this COULD be extented - but as far as I'm aware only to the kernel and initrd the bootcode loads and start ...

... and from there? neither windows nor linux enforce this chain any further into userland: you can still download any stuff from the internet or even write your own - and there's nothin stopping you

and even if: it's your system, you're the admin and if required you can grant execution permission to everything

so - against what exactly does secureboot protect you?
unless you can give any answer to this I wouldn't bother with this crap - just wipe the keys and use your computer as you like

I'm dual booting with Windows 11 and play games with kernel level anticheats and ones that require secure boot. I don't want to have to switch between them each time I switch OSes.

cryptearth

Member

Registered: 2024-02-03

Posts: 1,730

Re: Can't reset sbctl

neither win11 nor kernel-level anti-cheat require secureboot to be enabled

charged

Member

From: Ontario

Registered: 2025-06-06

Posts: 10

Website

Re: Can't reset sbctl

neither win11 nor kernel-level anti-cheat require secureboot to be enabled

FACEIT anti-cheat requires secureboot