[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: fbx64.efi hangs after Debian 10.10 shim update

On Mon, Jun 21, 2021 at 09:12:31PM +0200, Pascal Hambourg wrote:
>Do you mind if I reply only to the list ?

Sure, that's fine!

>Le 21/06/2021 à 19:44, Steve McIntyre a écrit :
>> On Sun, Jun 20, 2021 at 07:44:58PM +0200, Pascal Hambourg wrote:
>> > 
>> > Using "Boot from EFI file" in the firmware boot menu, it appears that :
>> > - grubx64.efi (from either EFI\debian or EFI\BOOT) works
>> > - shimx64.efi (from EFI\debian) works
>> > - BOOTX64.efi (from EFI\BOOT) hangs
>> > - fbx64.efi (from either EFI\debian or EFI\BOOT) hangs
>> > 
>> > So as a workaround, I removed /boot/efi/EFI/BOOT/fbx64.efi again.
>> OK. That's surprising, any I imagine annoying for you. :-/
>Not really, as I would have removed fbx64.efi anyway to avoid creating
>multiple debian entries. I am actually expecting trouble with this EFI setup,
>it serves as a kind of sentinel. If I wanted no trouble, I would remove the
>shim and grub signed stuff as I do not use secure boot, or even disable EFI
>boot and enable only the BIOS boot. But that would be boring.


>> If you're prepared to help with testing the problem here (please!),
>> could you please:
>> 1. run "mokutil --set-verbosity true" from the Linux command line (as
>>     root)
>> 2. put the fbx64.efi file in place again (grub-install should do that)
>> 3. reboot and try to capture any output
>First screen with blue frame saying "Secure boot not enabled - OK"
>After a long list of scrolled "mok.c:" lines ending with "returning Success",
>the last lines before it stops are (partial, copied by hand) :
>shim.c:1727:shim_init() UEFI SHIM
>$Version: 15.4 $
>$BuildMachine: buildhost $
>$Commit: XXXX $
>shim.c:898:load_image() attempting to load \EFI\Boot\fbx64.efi
>pe.c:574:generate_hash() sha1 authenticode hash:
>pe.c:575:generate_hash() (2 lines of XX and hex codes)
>pe.c:576:generate_hash() sha256 authenticode hash:
>pe.c:577:generate_hash() (2 more lines of hex codes)
>pe.c:1057:handle_image() sbat section base:0xB9DED000 size:0xC6

Hmm, OK. That *looks* OK so far.

>> As you've already seen, the firmware on your machine seems buggy and
>> it looks like we might have found more edges in the new version of
>> shim. :-/
>So far, all UEFI firmwares I have seen were buggy in some way.
>If you mean this one seems more buggy than average, yes, I guess so.


Steve McIntyre, Cambridge, UK.                                steve@einval.com
< Aardvark> I dislike C++ to start with. C++11 just seems to be
            handing rope-creating factories for users to hang multiple
            instances of themselves.

Reply to: