Bug#1102182: efibootmgr: If Secure Boot is enabled, the system may not start after rebooting

To: Tanaka <debiantanaka45@riseup.net>, 1102182@bugs.debian.org
Subject: Bug#1102182: efibootmgr: If Secure Boot is enabled, the system may not start after rebooting
From: Pascal Hambourg <pascal@plouf.fr.eu.org>
Date: Thu, 1 May 2025 18:02:08 +0200
Message-id: <[🔎] abeadfba-03a5-4695-a1e9-120b6c88db6d@plouf.fr.eu.org>
Reply-to: Pascal Hambourg <pascal@plouf.fr.eu.org>, 1102182@bugs.debian.org
In-reply-to: <[🔎] 4841e78c-f26c-4d70-97fc-234e624f2389@riseup.net>
References: <174392132724.38851.10382475415261391693.reportbug@tvserver> <0c9c7eb8-27e7-46e2-8c9f-9d80231121b5@plouf.fr.eu.org> <56be5228-092f-4094-9f67-9b4271608faf@riseup.net> <9211b8c2-d36c-442e-b594-0ea2d3fa5da5@plouf.fr.eu.org> <174392132724.38851.10382475415261391693.reportbug@tvserver> <[🔎] 4841e78c-f26c-4d70-97fc-234e624f2389@riseup.net> <174392132724.38851.10382475415261391693.reportbug@tvserver>

On 01/05/2025 at 17:21, Tanaka wrote:

I ran grub-install manually and grubx64.efi disappeared from the bootentry.


This is the expected outcome. Does it reappear after a reboot ?

I am not sure, but the problem seems to be solved for the timebeing.

Perhaps this /File(\EFI\DEBIAN\GRUBX64.EFI). BO is not installed by
Debian, but the firmware of my computer found GRUBX64.EFI in the EFI
system partition and added it to the boot entry on its own.


This is what I suspect.

Is it possible to not install grubx64.efi in ESP when using shim?


No, because shim chains grubx64.efi from the same directory.

You could try to install GRUB only in the "removable media path"/EFI/BOOT and not in /EFI/debian.

Reply to:

References:
- Bug#1102182: efibootmgr: If Secure Boot is enabled, the system may not start after rebooting
  - From: Tanaka <debiantanaka45@riseup.net>

Prev by Date: Bug#1102182: efibootmgr: If Secure Boot is enabled, the system may not start after rebooting
Next by Date: Processed: forcibly merging 1089432 1104458
Previous by thread: Bug#1102182: efibootmgr: If Secure Boot is enabled, the system may not start after rebooting
Next by thread: Bug#1102182: efibootmgr: If Secure Boot is enabled, the system may not start after rebooting
Index(es):
- Date
- Thread