Re: x86_64: grub-install for secure boot

[Zvi Vered]

Hi Randy,

Thank you for your reply.

Did you mean that the grub-install should be:
grub-install --boot-directory=/media/sdb1/boot
--efi-directory=/media/sdb1/boot --uefi-secure-boot  ?
This way, /media/sdb1 contains only the boot directory.
boot directory contains 'ÉFI' and 'grub'

After this install, grub is not booting at all (with and without secure boot)

Thank you,
Zvika

On Fri, Jul 28, 2023 at 2:59 AM Randy Goldenberg
<randy.goldenberg@gmail.com> wrote:
>
> If the boot directory is /media/sdb1/boot, it seems odd for the efi
> directory to be the parent directory, rather than
> /media/sdb1/boot/efi.
>
> On Thu, Jul 27, 2023 at 12:54 PM Zvi Vered <veredz72@gmail.com> wrote:
> >
> > Hello,
> >
> > I'm trying to install grub 2.x for secure boot .
> > I did the following steps under knoppix 9.1 :
> >
> > mkfs.fat -F32 /dev/sdb1
> > mount -t vfat /dev/sdb1 /media/sdb1
> > apt-get install grub-efi-amd64-signed
> > grub-install --boot-directory=/media/sdb1/boot --efi-directory=/media/sdb1
> > --uefi-secure-boot
> >
> > But when I selected this device in the boot menu I got the red message
> > telling this partition contains unsecured code.
> >
> > Can you please advise how I should proceed?
> >
> > Thank you,
> > Zvika