Installation • Re: MX23 Secure boot - An experiement...

With a little confusion going on, I thought I would try to secure boot. My initial test following fehlix's excellent guides resulted in a perfect secure boot on my Dell as well as the HP envy I tried.

Here are my steps:

Started with MX-23.3_x64.iso
(which comes with Debian's signed kernel and signed Live GRUB.)

Created a LiveUSB using latest "MX Live USB Maker".

Secure Boot on in bios

Booted LiveUSB and installed to SSD

Install appeared all normal, rebooted at end of install and machine will not boot. (Error says no secure boot HD)

Turned off secure boot, machine booted perfectly from ssd

Did apt update then

Code:

sudo apt install grub-efi-amd64-signed mokutil shim-signed

then:

Code:

sudo grub-install --bootloader-id=MX23sudo grub-install --bootloader-id=debian

Both completed without errors.

Reboot, changed to secure boot in bios and booted right up.

Verified secure boot with

Code:

sudo mokutil --sb-state

Tomorrow I shall walk through updating kernels and seeing how I can break this... :-)

Edit: Forgot to link!

fehlix excellent posts on how to do this:
here: viewtopic.php?t=67022

Statistics: Posted by fehlix — Wed Jul 03, 2024 8:34 am