Re: x86_64: grub-install for secure boot

[Zvi Vered]

Hi Pascal,

Thank you for your reply.
shim-signed is installed. The output of:
apt list --installed | grep shim
is:
shim-helpers-i386-signed/stable,testing,unstable,now 1+15.7+1 i386
[installed,automatic]
shim-signed-common/stable,stable,testing,testing,unstable,unstable,now
1.39+15.7-1 all [installed,automatic]
shim-signed/stable,testing,unstable,now 1.39+15.7-1 i386 [installed]
shim-unsigned/stable,testing,unstable,now 15.7-1 i386 [installed,automatic]

The contents of /media/sdb1/EFI is:
/media/sdb1/EFI
                      |------debian
                                  |-------grubx64.efi
                                  |-------grub.cfg

Best regards,
Zvika

On Thu, Jul 27, 2023 at 11:31 PM Pascal Hambourg <pascal@plouf.fr.eu.org> wrote:
>
> Hello,
>
> On 27/07/2023 at 20:44, Zvi Vered wrote:
> >
> > I'm trying to install grub 2.x for secure boot .
> > I did the following steps under knoppix 9.1 :
> >
> > mkfs.fat -F32 /dev/sdb1
> > mount -t vfat /dev/sdb1 /media/sdb1
> > apt-get install grub-efi-amd64-signed
> > grub-install --boot-directory=/media/sdb1/boot --efi-directory=/media/sdb1
> > --uefi-secure-boot
> >
> > But when I selected this device in the boot menu I got the red message
> > telling this partition contains unsecured code.
>
> Is shim-signed installed ?
> What is the contents of /media/sdb1/EFI ?
>