Opensuse Aeon installation and questions

English Applications
1

Hello

First time to come openSUSE and getting some issues to install AEON. Been using Linux 3 years mostly in Fedora Workstation and Silverblue, but due the recent stuff choose to go on opensuse.

First I downloaded and flashed AEON started from boot and hitting error and it won’t install seen text fast something about self signed shim

Some other questions related after I someday get the aeon to install that somehow I didn’t find

I am running Optimus system Intel UHD and Nvidia RTX 3050 TI so question is how to get and install Nvidia drivers and signing process if needed?

Second I am relying on Chrome alit due to other work and Sync stuff with drive and I guess only way is to layering chrome to get full Access since I never got flatpaks permissions to work to get PWA apps on desktop and password manager browser/desktop app sync. If there is a way to do that on flatpaks I would use it and minimize the layering even more.

About VPN that prob need to layer using nordVPN it is all on terminal commands.

All help and guides will be useful since I am switching from another distro to use AEON

2

Trying to download image again and seems to be really slow now is there mirrors where I can choose? Getting 3kb/s download speeds on image

3

Welcome.

As a test, can you disable secure boot and see if you can go beyond this?

4

Will test that after I get new image downloaded will report the results when I know more

5

I got boot screen on secure boot off, but starting install I get only black screen.

With secure boot on I get error for SBAT self check failed : security policy violation

6

Found some older threads having same issues trying all possible solutions cleared all keys delete and reset and cleared TPM ownership to factory no affect

Still same when secure boot is on and if disable I see grub boot and choose install then getting just black screen

7

@PhatLe Hi and welcome to the Forum :smile:
At present Aeon is at RC3, you need TPM2.0+, secure boot is required as it’s current TIK installer is for FDE (Full DIsk Encryption).

My suggestion is to join the Aeon IRC or Matrix channels to follow along there or have questions.

Likewise check out Portal:Aeon - openSUSE Wiki

8

On website I downloaded latest but the mirrors are so slow I can’t wait again full day to download since it hits max 17Kb/s only… My 2 16Gb falshdrives got destroyed when trying to install and are now not detected on any machine second one went when it booted on other laptop with secure boot enabled and then back screen after some minutes it says reboot started and hangs force shutdown and flashdrive broke. When I connect flash drive it shows something happening in flashdrive still since led blinking instantly when I put it on machines.

About matrix etc I don’t use those only forums and wiki I have read so many times I can remember steps

Machine I want to get aeon has tpm2+ and many other secure features enabled Dell XPS 9510 model

And thank you glad to be here

9

@PhatLe The documentation has been updated just recently, so have you perused it again?

10

Yes just watching those still spend now 12 hours to get installed, but haven’t got it yet working

11

I have to lift my hands up I run out of flash drives and can’t even get leap or tumbleweed installed getting same SBAT security policy violation

12

@PhatLe SBAT verification error - cannot disable secureboot

13

Thank you will try that after tumbleweed install I found one 2GB flashdrive and using net install tho I had to disable secure boot to start installing will update if the link solution work

14

Haven’t yet got tumbleweed installed hitting error on netinstaller where it says no repository found

15

Didn’t know that. I was considering Kalpa for some old machines, well, I guess it’ll take the same way.

Can’t even cfdisk erase them?

16

Couldn’t get those flashdrives work anymore… Ordered some 32GB and try to install aeon again after I finish tumbleweed install and fix the shim issues.

17

I can only use openSUSE without secure boot the solution link didn’t fix issue after turning secure boot back I get same policy violation again and shutdown

18

The fix is on openSUSE leap 15.6 it seems it has newer shim than tumbleweed or aeon/kalpa I found threat here posted June 16 saying same and I can boot leap 15.6 from net install since no big enough USB now to run live but I have secure boot enabled so goin now leap 15.6 and wait for new flashdrives to arrive

19

@PhatLe Just to clarify, Aeon is a single install setup for the internal disk, no dual boot, multi boot, no live boot etc.

20

I am avoiding problems by using the “shim.efi” and “MokManager.efi” from Leap 15.6 to boot Tumbleweed.

I have enrolled the CA certificate used by Tumbleweed. That would be file "/etc/uefi/certs/4659838C-shim.crt" on a Tumbleweed system. I enrolled with “mokutil --import”, and then the blue screen on the next boot.

That avoids SBAT problems due to the different “shim” versions.

1 Like