<div dir="ltr"><div><div>No, I did not turn anything off. <br><br>I just told UEFI that I want to boot from DVD (or was that: "boot first from DVD, then hard disk", don't know), and things just worked as expected.<br>
<br>
I think what is happening is that a) Ubuntu is one of the recognized vendors whose secure boot keys are accepted and b) it stores the keys in /boot/efi. <br><br>The stuff in boot/efi/EFI/ubuntu is as follows:<br><br># ls -l /boot/efi/EFI/ubuntu/<br>
total 2104<br>-rwxr-xr-x 1 root root 115 Apr 9 17:47 grub.cfg<br>-rwxr-xr-x 1 root root 793464 Apr 9 17:47 grubx64.efi<br>-rwxr-xr-x 1 root root 1355736 Apr 9 17:47 shimx64.efi<br><br>And ...<br><br># file /boot/efi/EFI/ubuntu/*<br>
/boot/efi/EFI/ubuntu/grub.cfg: ASCII text<br>/boot/efi/EFI/ubuntu/grubx64.efi: PE32+ executable (EFI application) x86-64 (stripped to external PDB), for MS Windows<br>/boot/efi/EFI/ubuntu/shimx64.efi: PE32+ executable (EFI application) x86-64 (stripped to external PDB), for MS Windows<br>
<br>Note the "for MS Windows" part!<br><br>And ...<br><br># cat /boot/efi/EFI/ubuntu/grub.cfg <br>search.fs_uuid 82cef56a-blahblah root <br>set prefix=($root)/boot/grub<br>configfile $prefix/grub.cfg<br><br></div>
So, it seems to me that this stuff will remain static across kernel upgrades, and that is how they keep secureboot and UEFI happy, while keeping the kernel customizable to all geeky whims.<br><br></div>Mind you, I have not tried a PC/Laptop with dual boot, but it seems that secureboot and UEFI are OK if you use Ubuntu (and a few other distros).<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 9, 2014 at 6:51 PM, unsolicited <span dir="ltr"><<a href="mailto:unsolicited@swiz.ca" target="_blank">unsolicited@swiz.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Interesting.<br>
<br>
So you had to turn of SecureBoot to boot the DVD? Or just changed the boot order?<br>
<br>
If turn off of SecureBoot, did turning it on post-install still let it boot?<br>
<br>
Evidently, note to selves, don't nuke the /boot/efi partition? (In which Ubuntu is probably putting keys for the UEFI / SecureBoot to find at startup? [Or turn off SecureBoot and live with it that way if you don't want the extra partition?]<div class="">
<br>
<br>
<br>
On 14-04-09 03:51 PM, Khalid Baheyeldin wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">
A followup on this thread.<br>
<br>
I had to replace a PC that is running Linux exclusively, with a new one.<br>
<br>
The new one had UEFI and Windows 8.<br>
<br>
For this PC, I don't need Windows at all, so I just inserted the Ubuntu<br>
Server 12.04.4 LTS DVD and did a normal install from it, changed the UEFI<br>
to boot from the DVD, and all went smoothly. Nothing special at all.<br>
<br>
The only difference from old BIOS PCs is that there is a partition that is<br>
mounted at /boot/efi and contains a directory named EFI with a directory<br>
named ubuntu under that.<br>
<br>
So, as mentioned in this thread before, nothing much if you have Linux on<br>
its own.<br>
<br>
<br>
<br></div><div class="">
______________________________<u></u>_________________<br>
kwlug-disc mailing list<br>
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://kwlug.org/mailman/<u></u>listinfo/kwlug-disc_kwlug.org</a><br>
<br>
</div></blockquote><div class="HOEnZb"><div class="h5">
<br>
<br>
______________________________<u></u>_________________<br>
kwlug-disc mailing list<br>
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://kwlug.org/mailman/<u></u>listinfo/kwlug-disc_kwlug.org</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Khalid M. Baheyeldin<br><a href="http://2bits.com" target="_blank">2bits.com</a>, Inc.<br>Fast Reliable Drupal<br>Drupal optimization, development, customization and consulting.<br>
Simplicity is prerequisite for reliability. -- Edsger W.Dijkstra<br>Simplicity is the ultimate sophistication. -- Leonardo da Vinci<br>For every complex problem, there is an answer that is clear, simple, and wrong." -- H.L. Mencken<br>
</div>