bugGNU GRUB - Bugs: bug #60211, error: verification requested but...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #60211: error: verification requested but nobody cares

Submitted by:  Giancarlo Razzolini <grazzolini>
Submitted on:  Thu 11 Mar 2021 10:14:52 AM UTC  
 
Category:  Booting Severity:  Major
Priority:  5 - Normal Item Group:  Software Error
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release: 
Release:  other Reproducibility:  Every Time
Planned Release:  None

Sun 02 May 2021 10:36:30 PM UTC, comment #3: 

original submission:

> I have detailed the steps on how to reproduce this issue:
> https://md.archlinux.org/F1JuYj5xQtWyhvH8_ilErg


Having the same problem when trying to use only my own keys (following the arch-wiki guide without shim as I don't want any other keys than mine).

Adding the tpm module to the core-image via --modules="tpm" on grub-install enabled me to get into grub without said error.

When selecting my signed kernel to boot I got an error stating "shim_lock protocol not found".

After once again running grub-install, this time with both --modules="tpm" and --disable-shim-lock I was able to successfully boot with enabled Secure Boot.

Still not really sure why tpm changes something in the first place and how to properly do it without shim.

architekt
Wed 31 Mar 2021 01:20:28 PM UTC, comment #2: 

comentário #1:

> I see the same happening on Gentoo with 2.06-rc1


Yes, we also updated to 2.06rc1 on Arch, but the behavior is the same. This bug is the main reason we have been holding the package on Arch, because we know there might be several users out there rolling their own Secure Boot keys with GRUB.

Giancarlo Razzolini <grazzolini>
Tue 30 Mar 2021 11:33:23 PM UTC, comment #1: 

I see the same happening on Gentoo with 2.06-rc1

Andrius Štikonas <stikonas>
Thu 11 Mar 2021 10:14:52 AM UTC, original submission:  

When using your own Secure Boot keys (not MS keys) and grub 2:2.04.r358.g39cfb3eb5-2 on Arch Linux, booting will fail with the following error:

error: verification requested but nobody cares: (cryptouuid/<boot device uuid>/grub/x86_64-efi/normal.mod).

I have detailed the steps on how to reproduce this issue:

https://md.archlinux.org/F1JuYj5xQtWyhvH8_ilErg

It is also worth mentioning that using shim to load grub doesn't change anything. 

Giancarlo Razzolini <grazzolini>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by architekt (Posted a comment)
  • -email is unavailable- added by stikonas (Posted a comment)
  • -email is unavailable- added by grazzolini (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    No changes have been made to this item

    Back to the top


    Powered by Savane 3.7