'Invalid signature detected' after ssd was not working?

ernstb · January 10, 2025, 3:20pm

I am running tumbleweed for quite some time now. Today, I ran the regular sudo zypper dup. When I came back to my laptop, I only saw a terminal and some errors. So I rebooted the system and my laptop did not recognize any ssd. So, I turned off my laptop, turned it on, and then the ssd was recognized again. I am not sure what caused this issue.
Now, if I boot, I get a secure boot error:

Secure boot violation
Invalid signature detected. Check Secure Boot Policy in Setup

When I disable secure boot in the UEFI Bios, I can boot fine. However, if I re-enable it, I get this error again. How can I re-enable secure boot so it works again?

arvidjaar · January 10, 2025, 3:49pm

Show output of

efibootmgr

ernstb · January 10, 2025, 4:03pm

$sudo efibootmgr -v
BootCurrent: 0001
Timeout: 1 seconds
BootOrder: 0001,0000
Boot0000* Windows Boot Manager  HD(1,GPT,138e1043-f918-4552-8257-ff1e057393f5,0x800,0x82000)/File(\EFI\MICROSOFT\BOOT\BOOTMGFW.EFI)<snip long number, possibly key?>
Boot0001* opensuse      HD(1,GPT,138e1043-f918-4552-8257-ff1e057393f5,0x800,0x82000)/File(\EFI\OPENSUSE\GRUBX64.EFI)

arvidjaar · January 10, 2025, 5:16pm

Yes, it is not signed. Show

ls -lR /boot/efi
grep LOADER /etc/sysconfig/bootloader

ernstb · January 10, 2025, 7:02pm

$ls -lR /boot/efi
/boot/efi:
total 36060
-rwxr-xr-x 1 root root  3351048  5 jan  2023 DroidSansFallback.atf
drwxr-xr-x 5 root root     4096  9 okt 12:03 EFI
-rwxr-xr-x 1 root root 16779264  8 aug  2023 M1505YAAS.303
-rwxr-xr-x 1 root root 16779264 10 jan 16:29 M1505YA.BIN
drwxr-xr-x 2 root root     4096 29 dec  2023 System Volume Information

/boot/efi/EFI:
total 12
drwxr-xr-x 2 root root 4096 29 dec  2023 Boot
drwxr-xr-x 4 root root 4096 29 dec  2023 Microsoft
drwxr-xr-x 2 root root 4096  9 okt 12:03 opensuse

/boot/efi/EFI/Boot:
total 1656
-rwxr-xr-x 1 root root 1692168  1 nov 20:53 bootx64.efi

/boot/efi/EFI/Microsoft:
total 12
drwxr-xr-x 41 root root 8192 29 dec  2023 Boot
drwxr-xr-x  2 root root 4096 29 dec  2023 Recovery

/boot/efi/EFI/Microsoft/Boot:
total 7324
-rwxr-xr-x 1 root root   36864 10 jan 16:42 BCD
-rwxr-xr-x 1 root root   65536 29 dec  2023 BCD.LOG
-rwxr-xr-x 1 root root       0 29 dec  2023 BCD.LOG1
-rwxr-xr-x 1 root root       0 29 dec  2023 BCD.LOG2
drwxr-xr-x 2 root root    4096 29 dec  2023 bg-BG
-rwxr-xr-x 1 root root 1692168  1 nov 20:53 bootmgfw.efi
-rwxr-xr-x 1 root root 1675240  1 nov 20:53 bootmgr.efi
-rwxr-xr-x 1 root root   65536 16 dec 13:53 BOOTSTAT.DAT
-rwxr-xr-x 1 root root   11030  8 okt 22:11 boot.stl
drwxr-xr-x 3 root root    4096 29 dec  2023 CIPolicies
drwxr-xr-x 2 root root    4096 29 dec  2023 cs-CZ
drwxr-xr-x 2 root root    4096 29 dec  2023 da-DK
drwxr-xr-x 2 root root    4096 29 dec  2023 de-DE
drwxr-xr-x 2 root root    4096 29 dec  2023 el-GR
drwxr-xr-x 2 root root    4096 29 dec  2023 en-GB
drwxr-xr-x 2 root root    4096 29 dec  2023 en-US
drwxr-xr-x 2 root root    4096 29 dec  2023 es-ES
drwxr-xr-x 2 root root    4096 29 dec  2023 es-MX
drwxr-xr-x 2 root root    4096 29 dec  2023 et-EE
drwxr-xr-x 2 root root    4096 29 dec  2023 fi-FI
drwxr-xr-x 2 root root    4096 29 dec  2023 Fonts
drwxr-xr-x 2 root root    4096 29 dec  2023 fr-CA
drwxr-xr-x 2 root root    4096 29 dec  2023 fr-FR
-rwxr-xr-x 1 root root  102432 10 jan 16:31 FveTcg_0.log
-rwxr-xr-x 1 root root  100000  8 okt 22:19 FveTcg_1.log
-rwxr-xr-x 1 root root  100000  8 okt 22:19 FveTcg_2.log
drwxr-xr-x 2 root root    4096 29 dec  2023 hr-HR
drwxr-xr-x 2 root root    4096 29 dec  2023 hu-HU
drwxr-xr-x 2 root root    4096 29 dec  2023 it-IT
drwxr-xr-x 2 root root    4096 29 dec  2023 ja-JP
-rwxr-xr-x 1 root root   71040  8 okt 22:12 kd_02_10df.dll
-rwxr-xr-x 1 root root  443776  8 okt 22:12 kd_02_10ec.dll
-rwxr-xr-x 1 root root   71024  8 okt 22:12 kd_02_1137.dll
-rwxr-xr-x 1 root root  279920  8 okt 22:12 kd_02_14e4.dll
-rwxr-xr-x 1 root root   91520  8 okt 22:12 kd_02_15b3.dll
-rwxr-xr-x 1 root root   83312  8 okt 22:12 kd_02_1969.dll
-rwxr-xr-x 1 root root   71040  8 okt 22:12 kd_02_19a2.dll
-rwxr-xr-x 1 root root   62848  8 okt 22:12 kd_02_1af4.dll
-rwxr-xr-x 1 root root  333184  8 okt 22:12 kd_02_8086.dll
-rwxr-xr-x 1 root root   54752  8 okt 22:12 kd_07_1415.dll
-rwxr-xr-x 1 root root   87520  8 okt 22:12 kd_0C_8086.dll
-rwxr-xr-x 1 root root   54640  8 okt 22:12 kdnet_uart16550.dll
-rwxr-xr-x 1 root root   87408  8 okt 22:11 kdstub.dll
drwxr-xr-x 2 root root    4096 29 dec  2023 ko-KR
drwxr-xr-x 2 root root    4096 29 dec  2023 lt-LT
drwxr-xr-x 2 root root    4096 29 dec  2023 lv-LV
-rwxr-xr-x 1 root root 1472008  1 nov 20:53 memtest.efi
drwxr-xr-x 2 root root    4096 29 dec  2023 nb-NO
drwxr-xr-x 2 root root    4096 29 dec  2023 nl-NL
drwxr-xr-x 2 root root    4096 29 dec  2023 pl-PL
drwxr-xr-x 2 root root    4096 29 dec  2023 pt-BR
drwxr-xr-x 2 root root    4096 29 dec  2023 pt-PT
drwxr-xr-x 2 root root    4096 29 dec  2023 qps-ploc
drwxr-xr-x 7 root root    4096 29 dec  2023 Resources
drwxr-xr-x 2 root root    4096 29 dec  2023 ro-RO
drwxr-xr-x 2 root root    4096 29 dec  2023 ru-RU
-rwxr-xr-x 1 root root  160576  8 okt 22:11 SecureBootRecovery.efi
drwxr-xr-x 2 root root    4096 29 dec  2023 sk-SK
drwxr-xr-x 2 root root    4096 29 dec  2023 sl-SI
drwxr-xr-x 2 root root    4096 29 dec  2023 sr-Latn-RS
drwxr-xr-x 2 root root    4096 29 dec  2023 sv-SE
drwxr-xr-x 2 root root    4096 29 dec  2023 tr-TR
drwxr-xr-x 2 root root    4096 29 dec  2023 uk-UA
-rwxr-xr-x 1 root root   10341 31 mei  2023 winsipolicy.p7b
drwxr-xr-x 2 root root    4096 29 dec  2023 zh-CN
drwxr-xr-x 2 root root    4096 29 dec  2023 zh-TW

/boot/efi/EFI/Microsoft/Boot/bg-BG:
total 168
-rwxr-xr-x 1 root root 82416  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 82408  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/CIPolicies:
total 4
drwxr-xr-x 2 root root 4096 29 dec  2023 Active

/boot/efi/EFI/Microsoft/Boot/CIPolicies/Active:
total 56
-rwxr-xr-x 1 root root 10564  7 mei  2022 {5DAC656C-21AD-4A02-AB49-649917162E70}.cip
-rwxr-xr-x 1 root root 31628 12 dec 20:32 {82443e1e-8a39-4b4a-96a8-f40ddc00b9f3}.cip
-rwxr-xr-x 1 root root 10972  7 mei  2022 {CDD5CB55-DB68-4D71-AA38-3DF2B6473A52}.cip

/boot/efi/EFI/Microsoft/Boot/cs-CZ:
total 208
-rwxr-xr-x 1 root root 81272  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81288  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46440  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/da-DK:
total 208
-rwxr-xr-x 1 root root 80264  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80368  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46440  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/de-DE:
total 216
-rwxr-xr-x 1 root root 84360  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 84464  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46952  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/el-GR:
total 216
-rwxr-xr-x 1 root root 85488  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 85360  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 47464  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/en-GB:
total 160
-rwxr-xr-x 1 root root 78320  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 78328  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/en-US:
total 208
-rwxr-xr-x 1 root root 78200  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 78208  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 45928  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/es-ES:
total 216
-rwxr-xr-x 1 root root 82304  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 82304  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46960  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/es-MX:
total 168
-rwxr-xr-x 1 root root 82416  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 82416  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/et-EE:
total 160
-rwxr-xr-x 1 root root 79352  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 79240  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/fi-FI:
total 208
-rwxr-xr-x 1 root root 81272  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81288  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46448  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/Fonts:
total 13392
-rwxr-xr-x 1 root root 3696672  6 mei  2022 chs_boot.ttf
-rwxr-xr-x 1 root root 3879376  6 mei  2022 cht_boot.ttf
-rwxr-xr-x 1 root root 1986824  6 mei  2022 jpn_boot.ttf
-rwxr-xr-x 1 root root 2373956  6 mei  2022 kor_boot.ttf
-rwxr-xr-x 1 root root  196312  6 mei  2022 malgun_boot.ttf
-rwxr-xr-x 1 root root  193908  6 mei  2022 malgunn_boot.ttf
-rwxr-xr-x 1 root root  165840  6 mei  2022 meiryo_boot.ttf
-rwxr-xr-x 1 root root  164204  6 mei  2022 meiryon_boot.ttf
-rwxr-xr-x 1 root root  183392  6 mei  2022 msjh_boot.ttf
-rwxr-xr-x 1 root root  181412  6 mei  2022 msjhn_boot.ttf
-rwxr-xr-x 1 root root  175292  6 mei  2022 msyh_boot.ttf
-rwxr-xr-x 1 root root  173492  6 mei  2022 msyhn_boot.ttf
-rwxr-xr-x 1 root root   45812  6 mei  2022 segmono_boot.ttf
-rwxr-xr-x 1 root root  102668  6 mei  2022 segoen_slboot.ttf
-rwxr-xr-x 1 root root  102944  6 mei  2022 segoe_slboot.ttf
-rwxr-xr-x 1 root root   50044  6 mei  2022 wgl4_boot.ttf

/boot/efi/EFI/Microsoft/Boot/fr-CA:
total 168
-rwxr-xr-x 1 root root 83832  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 83960  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/fr-FR:
total 216
-rwxr-xr-x 1 root root 84464  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 84448  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46960  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/hr-HR:
total 160
-rwxr-xr-x 1 root root 81264  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81376  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/hu-HU:
total 216
-rwxr-xr-x 1 root root 84344  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 84464  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46960  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/it-IT:
total 208
-rwxr-xr-x 1 root root 81800  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81792  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46432  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/ja-JP:
total 188
-rwxr-xr-x 1 root root 70648  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 70512  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 43880  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/ko-KR:
total 188
-rwxr-xr-x 1 root root 70128  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 70152  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 43880  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/lt-LT:
total 160
-rwxr-xr-x 1 root root 80352  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80368  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/lv-LV:
total 160
-rwxr-xr-x 1 root root 80368  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80248  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/nb-NO:
total 208
-rwxr-xr-x 1 root root 79856  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 79848  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46440  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/nl-NL:
total 216
-rwxr-xr-x 1 root root 82304  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 82400  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46448  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/pl-PL:
total 216
-rwxr-xr-x 1 root root 82808  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 82936  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46944  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/pt-BR:
total 208
-rwxr-xr-x 1 root root 81376  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81392  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46440  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/pt-PT:
total 208
-rwxr-xr-x 1 root root 81400  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81288  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46952  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/qps-ploc:
total 56
-rwxr-xr-x 1 root root 55152  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/Resources:
total 188
-rwxr-xr-x 1 root root 169320  6 mei  2022 bootres.dll
drwxr-xr-x 2 root root   4096 29 dec  2023 de-DE
drwxr-xr-x 2 root root   4096 29 dec  2023 en-US
drwxr-xr-x 2 root root   4096 29 dec  2023 fr-FR
drwxr-xr-x 2 root root   4096 29 dec  2023 it-IT
drwxr-xr-x 2 root root   4096 29 dec  2023 nl-NL

/boot/efi/EFI/Microsoft/Boot/Resources/de-DE:
total 16
-rwxr-xr-x 1 root root 14184 31 mei  2023 bootres.dll.mui

/boot/efi/EFI/Microsoft/Boot/Resources/en-US:
total 16
-rwxr-xr-x 1 root root 13680  7 mei  2022 bootres.dll.mui

/boot/efi/EFI/Microsoft/Boot/Resources/fr-FR:
total 16
-rwxr-xr-x 1 root root 14192 31 mei  2023 bootres.dll.mui

/boot/efi/EFI/Microsoft/Boot/Resources/it-IT:
total 16
-rwxr-xr-x 1 root root 14176 31 mei  2023 bootres.dll.mui

/boot/efi/EFI/Microsoft/Boot/Resources/nl-NL:
total 16
-rwxr-xr-x 1 root root 14176 31 mei  2023 bootres.dll.mui

/boot/efi/EFI/Microsoft/Boot/ro-RO:
total 160
-rwxr-xr-x 1 root root 80880  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80888  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/ru-RU:
total 208
-rwxr-xr-x 1 root root 81904  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81776  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 45928  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/sk-SK:
total 160
-rwxr-xr-x 1 root root 81904  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81904  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/sl-SI:
total 160
-rwxr-xr-x 1 root root 80904  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80752  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/sr-Latn-RS:
total 160
-rwxr-xr-x 1 root root 81784  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81784  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/sv-SE:
total 208
-rwxr-xr-x 1 root root 80864  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80760  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 45920  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/tr-TR:
total 208
-rwxr-xr-x 1 root root 80376  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 80264  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 46424  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/uk-UA:
total 160
-rwxr-xr-x 1 root root 81776  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 81800  8 okt 22:11 bootmgr.efi.mui

/boot/efi/EFI/Microsoft/Boot/zh-CN:
total 180
-rwxr-xr-x 1 root root 65904  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 65904  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 43352  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Boot/zh-TW:
total 180
-rwxr-xr-x 1 root root 66040  8 okt 22:11 bootmgfw.efi.mui
-rwxr-xr-x 1 root root 65912  8 okt 22:11 bootmgr.efi.mui
-rwxr-xr-x 1 root root 43376  7 mei  2022 memtest.efi.mui

/boot/efi/EFI/Microsoft/Recovery:
total 52
-rwxr-xr-x 1 root root 20480 29 dec  2023 BCD
-rwxr-xr-x 1 root root 32768 29 dec  2023 BCD.LOG
-rwxr-xr-x 1 root root     0 29 dec  2023 BCD.LOG1
-rwxr-xr-x 1 root root     0 29 dec  2023 BCD.LOG2

/boot/efi/EFI/opensuse:
total 4000
-rwxr-xr-x 1 root root      58 12 dec 20:42 boot.csv
-rwxr-xr-x 1 root root     105 12 dec 20:42 grub.cfg
-rwxr-xr-x 1 root root 2107248 12 dec 20:42 grub.efi
-rwxr-xr-x 1 root root  155648 10 jan 16:04 grubx64.efi
-rwxr-xr-x 1 root root  852312 12 dec 20:42 MokManager.efi
-rwxr-xr-x 1 root root  965528 12 dec 20:42 shim.efi

/boot/efi/System Volume Information:
total 0

$grep LOADER /etc/sysconfig/bootloader
LOADER_TYPE="grub2-efi"

arvidjaar · January 11, 2025, 6:21am

And

grep SECURE /etc/sysconfig/bootloader

ernstb · January 11, 2025, 12:38pm

SECURE_BOOT="no"

I did disable secure boot and trusted boot in Yast Boot Loader settings after all problems. If I enable it in Yast, and in the BIOS I enable Secure boot, it fails. Both (thus in BIOS and Yast) disabled works. Disabled in BIOS and enabled in Yast does work too.

arvidjaar · January 11, 2025, 12:40pm

Well, then you should show

efibootmgr -v

output after you have enabled Secure Boot in YaST.

ernstb · January 11, 2025, 7:47pm

$sudo efibootmgr -v
BootCurrent: 0005
Timeout: 1 seconds
BootOrder: 0005,0001,0000
Boot0000* Windows Boot Manager  HD(1,GPT,138e1043-f918-4552-8257-ff1e057393f5,0x800,0x82000)/File(\EFI\MICROSOFT\BOOT\BOOTMGFW.EFI)57494e444f5753000100000088000000780000004200430044004f0042004a004500430054003d007b00390064006500610038003600320063002d0035006300640064002d0034006500370030002d0061006300630031002d006600330032006200330034003400640034003700390035007d00000000000100000010000000040000007fff0400
      dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 20 08 00 00 00 00 00 43 10 8e 13 18 f9 52 45 82 57 ff 1e 05 73 93 f5 02 02 / 04 04 46 00 5c 00 45 00 46 00 49 00 5c 00 4d 00 49 00 43 00 52 00 4f 00 53 00 4f 00 46 00 54 00 5c 00 42 00 4f 00 4f 00 54 00 5c 00 42 00 4f 00 4f 00 54 00 4d 00 47 00 46 00 57 00 2e 00 45 00 46 00 49 00 00 00 / 7f ff 04 00
    data: 57 49 4e 44 4f 57 53 00 01 00 00 00 88 00 00 00 78 00 00 00 42 00 43 00 44 00 4f 00 42 00 4a 00 45 00 43 00 54 00 3d 00 7b 00 39 00 64 00 65 00 61 00 38 00 36 00 32 00 63 00 2d 00 35 00 63 00 64 00 64 00 2d 00 34 00 65 00 37 00 30 00 2d 00 61 00 63 00 63 00 31 00 2d 00 66 00 33 00 32 00 62 00 33 00 34 00 34 00 64 00 34 00 37 00 39 00 35 00 7d 00 00 00 00 00 01 00 00 00 10 00 00 00 04 00 00 00 7f ff 04 00
Boot0001* opensuse      HD(1,GPT,138e1043-f918-4552-8257-ff1e057393f5,0x800,0x82000)/File(\EFI\OPENSUSE\GRUBX64.EFI)
      dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 20 08 00 00 00 00 00 43 10 8e 13 18 f9 52 45 82 57 ff 1e 05 73 93 f5 02 02 / 04 04 38 00 5c 00 45 00 46 00 49 00 5c 00 4f 00 50 00 45 00 4e 00 53 00 55 00 53 00 45 00 5c 00 47 00 52 00 55 00 42 00 58 00 36 00 34 00 2e 00 45 00 46 00 49 00 00 00 / 7f ff 04 00
Boot0005* opensuse-secureboot   HD(1,GPT,138e1043-f918-4552-8257-ff1e057393f5,0x800,0x82000)/File(\EFI\OPENSUSE\SHIM.EFI)
      dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 20 08 00 00 00 00 00 43 10 8e 13 18 f9 52 45 82 57 ff 1e 05 73 93 f5 02 02 / 04 04 32 00 5c 00 45 00 46 00 49 00 5c 00 4f 00 50 00 45 00 4e 00 53 00 55 00 53 00 45 00 5c 00 53 00 48 00 49 00 4d 00 2e 00 45 00 46 00 49 00 00 00 / 7f ff 04 00

arvidjaar · January 11, 2025, 8:43pm

And when you reboot now? What happens?

40476 · January 11, 2025, 9:46pm

could this be the first opensuse appearance of the recent linux bootkit?

ernstb · January 12, 2025, 7:19pm

It just works now. I don’t know what I did wrong earlier, but now it is enabled again. Thanks for your help!

ernstb · January 12, 2025, 7:21pm

What do you mean? Do you think my laptop got infected? I thought my SSD or BIOS had a glitch, do you suspect something else?