Page 1 of 8 123 ... LastLast
Results 1 to 10 of 78

Thread: How to fix laptop broken by Ubuntu

  1. #1

    Default How to fix laptop broken by Ubuntu

    I wrote this thread, because I cannot install Ubuntu (I have Lenovo laptop damaged by Ubuntu, when I start LiveCD with Ubuntu) and I need to fix UEFI on it.

    I have read this instruction: https://bugs.launchpad.net/ubuntu/+s...x/+bug/1734147
    I can download deb and unpack it. Can anybody tell me, where can I copy files from these debs?

    Sorry for writing post here, but topic is more related to OpenSuSE, because using Windows 10 or OpenSuSE Tumbleweed is the only option to repair my computer.

  2. #2
    Join Date
    Sep 2012
    Posts
    7,099

    Default Re: How to fix laptop broken by Ubuntu

    As with other kernels, kernel (vmlinuz-x.y.z) should go under /boot, modules under /lib/modules and you need to create initrd running mkinitrd. You do not really need to add it to boot menu, you can simply edit any available menu and replace kernel/initrd versions.

  3. #3

    Default Re: How to fix laptop broken by Ubuntu

    Thanks for your help, but that doesn't solve my problem.

    Grub2 complains about bad signature of Ubuntu kernel.
    I think, I should:
    - Disable signature checking (How Can I do this?)
    - Sign Ubuntu kernel with OpenSuSE key or add Ubuntu key to my motherboard

    Second solution probably isn't available, because I cannot wrote new key to motherboard (I cannot change anything) and I probably cannot sign Ubuntu kernel with OpenSuSE key (that's only action, OpenSuSE team can do).

    So right question is probably: how to disable (using Yast or by command line) signature checking in grub2?

  4. #4
    Join Date
    Nov 2009
    Location
    West Virginia Sector 13
    Posts
    16,287

    Default Re: How to fix laptop broken by Ubuntu

    Disable secure boot in the UEFI/BIOS

  5. #5

    Default Re: How to fix laptop broken by Ubuntu

    Thanks for your advice, but I cannot write configuration to my motherboard ;-) .

  6. #6
    Join Date
    Sep 2012
    Posts
    7,099

    Default Re: How to fix laptop broken by Ubuntu

    Quote Originally Posted by Lachu View Post
    Grub2 complains about bad signature of Ubuntu kernel
    Show output of "efibootmgr -v"
    Disable signature checking (How Can I do this?)
    Use "linux" instead of "linuxefi" to load kernel (and "initrd" instead of "intirdefi").
    Sign Ubuntu kernel with OpenSuSE key
    You can't - you (or anyone of us) do not have SUSE key. If you could do it, there would be no sense in checking signature in the first place. If you can run shim (depending on how your EFI boot manager is configured) you may be able to enroll hash of kenel if EFI variables are stored in different EPROM.

  7. #7

    Default Re: How to fix laptop broken by Ubuntu

    Code:
    BootCurrent: 0004
    Timeout: 0 seconds
    BootOrder: 0004,0003,2003,0000,2001,2002
    Boot0000* Lenovo Recovery System        HD(7,GPT,5ecfa734-3d1a-4801-9d54-1a28f319f370,0x3a192000,0x1f4000)/File(\EFI\Microsoft\Boot\LrsBootMgr.efi)RC
    Boot0001* EFI Network 0 for IPv4 (1C-39-47-36-34-16)    PciRoot(0x0)/Pci(0x1c,0x2)/Pci(0x0,0x0)/MAC(1c3947363416,0)/IPv4(0.0.0.0:0<->0.0.0.0:0,0,0)RC
    Boot0002* EFI Network 0 for IPv6 (1C-39-47-36-34-16)    PciRoot(0x0)/Pci(0x1c,0x2)/Pci(0x0,0x0)/MAC(1c3947363416,0)/IPv6([::]:<->[::]:,0,0)RC
    Boot0003* Windows Boot Manager  HD(1,GPT,df1fe269-13f4-43f3-87d2-0bd7e8a65b7a,0x800,0x82000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}....................
    Boot0004* opensuse-secureboot   HD(1,GPT,df1fe269-13f4-43f3-87d2-0bd7e8a65b7a,0x800,0x82000)/File(\EFI\opensuse\shim.efi)
    Boot2001* EFI USB Device        RC
    Boot2002* EFI DVD/CDROM RC
    Boot2003* EFI Network   RC
    I'm not UEFI/EFI and encryption expert, but I think I have only public keys to check signature, but private keys have only OpenSuSE Team.

  8. #8
    Join Date
    Sep 2012
    Posts
    7,099

    Default Re: How to fix laptop broken by Ubuntu

    I suggest to try the most simple thing first - try editing menu entry and replacing "linuxefi" with "linux" and "initrdefi" with 'initrd". Does it boot?

  9. #9
    Join Date
    Aug 2010
    Location
    Chicago suburbs
    Posts
    15,674
    Blog Entries
    3

    Default Re: How to fix laptop broken by Ubuntu

    Quote Originally Posted by Lachu View Post
    I think, I should:
    - Disable signature checking (How Can I do this?)
    - Sign Ubuntu kernel with OpenSuSE key or add Ubuntu key to my motherboard
    Assuming that you are able to boot openSUSE, then I suggest adding the Ubuntu key (really, the Canonical key) to MokManager.

    First you will need to get the Canonical key. Easiest way is to boot the Ubuntu installer on a UEFI box (it does not need to be the same box). Then use "mokutil --export" to export the canonical key to a file.

    Then copy that file into the EFI partition in your computer -- copy to "/boot/efi". And then use "mokutil --import key (filename)" with openSUSE. It should complete the import when you next boot into openSUSE.
    openSUSE Leap 15.3; KDE Plasma 5.18.6;

  10. #10
    Join Date
    Sep 2012
    Posts
    7,099

    Default Re: How to fix laptop broken by Ubuntu

    Quote Originally Posted by nrickert View Post
    I suggest adding the Ubuntu key (really, the Canonical key) to MokManager.
    This is system where changing any BIOS settings is not possible because EPROM where they are stored is read-only. With high probability EFI variable store is read-only as well. If storing variable is possible, you do not even need certificate - as I mentioned you can simply enroll hash of binary, this will be enough.

Page 1 of 8 123 ... LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •