• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    FOG Exiting to Shim UEFI Key Management

    Scheduled Pinned Locked Moved Unsolved
    Linux Problems
    2
    13
    1.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • george1421G
      george1421 Moderator
      last edited by

      I’m just thinking out loud at the moment… So it sounds like refind can’t see the uefi boot partition, where the uefi boot rom can see the uefi boot file.

      Is that a standard uefi boot layout or something you created. Two thoughts come to mind

      1. Refind doesn’t understand the xfs file system
      2. It doesn’t find the uefi bootstrap image in /boot/efi partition.

      I know the boot loaders will look for the file bootx64.efi in /boot/efi directory (assuming a 64 bit OS is used). If it doesn’t find it refind will search the first disk and then give up unless you tell it to search in more areas. Do you know if this file exists on in your test machine /boot/efi/bootx64.efi ?

      Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

      N 1 Reply Last reply Reply Quote 0
      • N
        novaholic @george1421
        last edited by

        @george1421
        I believe it is a standard boot layout. When installing the OS I selected ‘Standard Partion’ instead of using LVM. I then just left the defaults for /boot, /boot/efi, /, and swap

        bootx64.efi is not at that location, I found it here: /boot/efi/EFI/BOOT/BOOTX64.EFI

        I checked the Fedora system that is working correctly. BOOTX64.EFI is in the same location as on the CentOS machine.

        george1421G 1 Reply Last reply Reply Quote 0
        • george1421G
          george1421 Moderator @novaholic
          last edited by

          @novaholic said in FOG Exiting to Shim UEFI Key Management:

          /boot/efi/EFI/BOOT/BOOTX64.EFI

          Well that’s a bit unexpected. You may have to update the refind.conf file in /var/www/html/fog/service/ipxe directory to search more places, specifically the path you cited above.

          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

          N 1 Reply Last reply Reply Quote 0
          • N
            novaholic @george1421
            last edited by

            @george1421
            I added this block to refind.conf and rebooted the FOG server but it did not change the behavior.

            menuentry CentOS {
                loader /boot/efi/EFI/BOOT/BOOTX64.EFI
                enabled
            }
            

            I copied the BOOTX64.EFI file to /boot/efi/ but that didn’t change anything either.

            george1421G 1 Reply Last reply Reply Quote 0
            • george1421G
              george1421 Moderator @novaholic
              last edited by

              @novaholic That is not the right answer since the menu will not be displayed unless you turn it on. There should be an additional search path parameter where you can tell refind to search additional paths.

              Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

              N 1 Reply Last reply Reply Quote 0
              • N
                novaholic @george1421
                last edited by

                @george1421
                Gotcha, I removed the menu entry and added this line instead:

                also_scan_dirs /boot/efi/EFI/BOOT
                

                I verified that the change I made to the file was saved by navigating to: http://<FOG_IP>/fog/service/ipxe/refind.conf

                The behavior is still the same, CentOS is still failing to exit the FOG menu properly.

                george1421G 1 Reply Last reply Reply Quote 0
                • george1421G
                  george1421 Moderator @novaholic
                  last edited by

                  @novaholic I guess I need to find time to build a centos vm to see the exact layout of the disks. I’ll create one with physical partitions and not LVM because that how you are doing it. There has to be something missing here…

                  Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                  N 1 Reply Last reply Reply Quote 1
                  • N
                    novaholic @george1421
                    last edited by

                    @george1421 Thank you, I appreciate it. Let me know if you need any other configuration information

                    N 1 Reply Last reply Reply Quote 0
                    • N
                      novaholic @novaholic
                      last edited by novaholic

                      @george1421 I think I may have found a workaround, I’m not sure what ill-effects it may have yet.

                      While testing the CentOS image on a physical host I noticed it was able to boot fine using grubx64.efi
                      This file is located at /boot/efi/EFI/centos on my machine

                      In the refind.conf file I added two lines:

                      also_scan_dirs /boot/efi/EFI/centos
                      dont_scan_files mmx64.efi,MokManager.efi,shim.efi,shimx64-centos.efi,shimx64.efi
                      

                      Basically these two lines say, also search the centos folder for boot files and ignore every .efi file listed above.

                      I’ll run with this configuration and update if I come across any issues.

                      george1421G 1 Reply Last reply Reply Quote 0
                      • george1421G
                        george1421 Moderator @novaholic
                        last edited by

                        @novaholic Sorry the afternoon is a bit hectic here. I have the VM built and see the configuration / files as you mentioned. You are on the right track with the search path setting in refind.conf. Hopefully I get some time free in a bit.

                        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                        george1421G 1 Reply Last reply Reply Quote 0
                        • george1421G
                          george1421 Moderator @george1421
                          last edited by

                          @george1421 ok I had about 5 minutes between stuff. When I register the centos image and exit to hard drive I get these from refind (note I may have menus on in my refind config because I like to mess with things).
                          refind1.png

                          refind2.png

                          redind3.png

                          As you noted selecting grubx64.efi boots into centos. I can also tell you the shimx64 is a secure boot shim to allow centos to boot on computers with secure boot enabled. In my case my VM doesn’t know anything about secure boot so grub is the right answer.

                          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                          1 Reply Last reply Reply Quote 0
                          • george1421G
                            george1421 Moderator
                            last edited by

                            OK I have a working solution at least for centos uefi. I don’t know if it will break others… YMMV

                            scanfor internal,external,optical,manual
                            dont_scan_files shim.efi,MokManager.efi,shimx64-centos.efi,shimx64.efi,mmx64.efi
                            

                            I didn’t need to change anything else from default. I didn’t see any other settings I fiddled with over time either.

                            Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                            1 Reply Last reply Reply Quote 0
                            • 1 / 1
                            • First post
                              Last post

                            199

                            Online

                            12.0k

                            Users

                            17.3k

                            Topics

                            155.2k

                            Posts
                            Copyright © 2012-2024 FOG Project