Re: fbx64.efi hangs after Debian 10.10 shim update
On Mon, Jun 21, 2021 at 09:12:31PM +0200, Pascal Hambourg wrote:
>Do you mind if I reply only to the list ?
Sure, that's fine!
>Le 21/06/2021 à 19:44, Steve McIntyre a écrit :
>> On Sun, Jun 20, 2021 at 07:44:58PM +0200, Pascal Hambourg wrote:
>> >
>> > Using "Boot from EFI file" in the firmware boot menu, it appears that :
>> > - grubx64.efi (from either EFI\debian or EFI\BOOT) works
>> > - shimx64.efi (from EFI\debian) works
>> > - BOOTX64.efi (from EFI\BOOT) hangs
>> > - fbx64.efi (from either EFI\debian or EFI\BOOT) hangs
>> >
>> > So as a workaround, I removed /boot/efi/EFI/BOOT/fbx64.efi again.
>>
>> OK. That's surprising, any I imagine annoying for you. :-/
>
>Not really, as I would have removed fbx64.efi anyway to avoid creating
>multiple debian entries. I am actually expecting trouble with this EFI setup,
>it serves as a kind of sentinel. If I wanted no trouble, I would remove the
>shim and grub signed stuff as I do not use secure boot, or even disable EFI
>boot and enable only the BIOS boot. But that would be boring.
ACK.
>> If you're prepared to help with testing the problem here (please!),
>> could you please:
>>
>> 1. run "mokutil --set-verbosity true" from the Linux command line (as
>> root)
>> 2. put the fbx64.efi file in place again (grub-install should do that)
>> 3. reboot and try to capture any output
>
>Done.
>First screen with blue frame saying "Secure boot not enabled - OK"
>After a long list of scrolled "mok.c:" lines ending with "returning Success",
>the last lines before it stops are (partial, copied by hand) :
>
>shim.c:1727:shim_init() UEFI SHIM
>$Version: 15.4 $
>$BuildMachine: buildhost $
>$Commit: XXXX $
>shim.c:898:load_image() attempting to load \EFI\Boot\fbx64.efi
>pe.c:574:generate_hash() sha1 authenticode hash:
>pe.c:575:generate_hash() (2 lines of XX and hex codes)
>pe.c:576:generate_hash() sha256 authenticode hash:
>pe.c:577:generate_hash() (2 more lines of hex codes)
>pe.c:1057:handle_image() sbat section base:0xB9DED000 size:0xC6
Hmm, OK. That *looks* OK so far.
>> As you've already seen, the firmware on your machine seems buggy and
>> it looks like we might have found more edges in the new version of
>> shim. :-/
>
>So far, all UEFI firmwares I have seen were buggy in some way.
>If you mean this one seems more buggy than average, yes, I guess so.
:-)
--
Steve McIntyre, Cambridge, UK. steve@einval.com
< Aardvark> I dislike C++ to start with. C++11 just seems to be
handing rope-creating factories for users to hang multiple
instances of themselves.
Reply to: