{"id":8002,"date":"2018-08-14T15:38:40","date_gmt":"2018-08-14T15:38:40","guid":{"rendered":"http:\/\/blog.bachi.net\/?p=8002"},"modified":"2021-04-29T15:41:24","modified_gmt":"2021-04-29T15:41:24","slug":"linuxmint-19-grub-efi-amd64-signed-failed-to-install","status":"publish","type":"post","link":"https:\/\/blog.bachi.net\/?p=8002","title":{"rendered":"LinuxMint 19: grub-efi-amd64-signed failed to install"},"content":{"rendered":"

Monthly News \u2013 July 2018<\/a>
\nGrub EFI amd 64 signed signed package fails on clean install mint 19<\/a>
\nInstaller Crashed with Error: the grub-efi-amd64-signed package failed to install into \/target\/ linux mint<\/a><\/p>\n

\r\nsudo mount \/dev\/sdXXX \/mnt\r\nsudo mount \/dev\/sdXX \/mnt\/boot\/efi\r\nsudo mount -t efivarfs efivarfs \/sys\/firmware\/efi\/efivars\r\nfor i in \/dev \/dev\/pts \/proc \/sys \/run; do sudo mount -B $i \/mnt$i; done\r\nsudo chroot \/mnt\r\ngrub-install \/dev\/sdX   or   grub-install -v --target=x86_64-efi --recheck \/dev\/sdX\r\nupdate-grub  \r\n<\/pre>\n
\r\n$ grub-install -v --target=x86_64-efi --recheck \/dev\/sdX\r\n[...]\r\ngrub-install: info: Registering with EFI: distributor = `ubuntu', path = `\\EFI\\ubuntu\\shimx64.efi', ESP at hostdisk\/\/dev\/sda,gpt1.\r\ngrub-install: info: executing efibootmgr --version <\/dev\/null >\/dev\/null.\r\ngrub-install: info: executing modprobe -q efivars.\r\ngrub-install: info: executing efibootmgr -b 0001 -B.\r\nBootCurrent: 0002\r\nTimeout: 1 seconds\r\nBootOrder: 0002,0000\r\nBoot0000* Diagnostic Program\r\nBoot0002* ubuntu\r\ngrub-install: info: executing efibootmgr -b 0002 -B.\r\nBootCurrent: 0002\r\nTimeout: 1 seconds\r\nBootOrder: 0000\r\nBoot0000* Diagnostic Program\r\ngrub-install: info: executing efibootmgr -c -d \/dev\/sda -p 1 -w -L ubuntu -l \\EFI\\ubuntu\\shimx64.efi.\r\nBootCurrent: 0002\r\nTimeout: 1 seconds\r\nBootOrder: 0001,0000\r\nBoot0000* Diagnostic Program\r\nBoot0001* ubuntu\r\nInstallation finished. No error reported.\r\n<\/pre>\n
Secure Boot Error: Invalid signature detected. Check secure boot policy in setup<\/a>
\nLinux Mint Installation Guide – EFI SecureBoot<\/a><\/p>\n
\r\n$ sudo efibootmgr -v\r\nBootCurrent: 0001\r\nTimeout: 1 seconds\r\nBootOrder: 0002,0001,0000\r\nBoot0000* Diagnostic Program\tMemoryMapped(11,0xca89e004,0xcb1cb003)\/FvFile(6f1cf8df-2398-4b3b-aaa6-35d97d4a76e9)\r\nBoot0001* ubuntu\tHD(1,GPT,2c027cf1-db3e-45e0-becb-a3224a6a7662,0x800,0x80000)\/File(\\EFI\\ubuntu\\shimx64.efi)\r\nBoot0002* Ubuntu Boot Manager\tHD(1,GPT,2c027cf1-db3e-45e0-becb-a3224a6a7662,0x800,0x80000)\/File(\\EFI\\ubuntu\\grubx64.efi)..\r\n\r\n$ sudo efibootmgr -o 0001,0002\r\nBootCurrent: 0001\r\nTimeout: 1 seconds\r\nBootOrder: 0001,0002\r\nBoot0000* Diagnostic Program\r\nBoot0001* ubuntu\r\nBoot0002* Ubuntu Boot Manager\r\n<\/pre>\n
Read-only file system<\/h1>\n
\r\n$ sudo grub-install --target=x86_64-efi  \r\nInstalling for x86_64-efi platform.\r\ngrub-install: error: cannot open `\/boot\/efi\/EFI\/ubuntu\/grubx64.efi': Read-only file system.\r\n\r\n$ sudo mount -o remount,rw \/boot\/efi\r\n\r\n$ sudo apt-get install grub-common grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed grub2-common grub2-theme-mint mint-meta-cinnamon mint-meta-core os-prober\r\n\r\n???\r\n$ sudo apt-get install shim-signed\r\n<\/pre>\n
\r\n$ lsblk -f\r\nNAME   FSTYPE LABEL    UUID                                 MOUNTPOINT\r\nsda                                                         \r\n\u251c\u2500sda1 vfat   GPT-BOOT E9CE-9FC2                            \/boot\/efi\r\n\u251c\u2500sda2                                                      \r\n\u251c\u2500sda3 ntfs            48A0C580A0C574CA                     \r\n\u251c\u2500sda4 ntfs            3E38754C387503E5                     \r\n\u251c\u2500sda5 ext4            27c3c697-3dca-4a68-9709-5b59f20955b0 \/\r\n\u251c\u2500sda6 vfat   EFISYS   BD41-11EE                            \r\n\u251c\u2500sda7 ufs             5d349a66b8ac1be8                     \r\n\u251c\u2500sda8                                                      \r\n\u2514\u2500sda9 swap            6a1747ad-120c-4c65-9062-2bb4eb071168 [SWAP]\r\nsr0\r\n<\/pre>\n
nvidia-driver-390<\/h1>\n
\r\nnvidia-compute-utils-390\r\nnvidia-dkms-390\r\nnvidia-driver-390\r\nnvidia-kernel-common-390\r\nnvidia-kernel-source-390\r\nnvidia-prime\r\nnvidia-prime-applet\r\nnvidia-settings\r\nnvidia-utils-390\r\n<\/pre>\n
\r\n$ sudo apt-get install shim-signed\r\n[...]\r\nAfter this operation, 0 B of additional disk space will be used.\r\nSetting up shim-signed (1.37~18.04.8+15+1552672080.a4a1fbe-0ubuntu2) ...\r\nInstalling for x86_64-efi platform.\r\nInstallation finished. No error reported.\r\nGenerating a new Secure Boot signing key:\r\nCan't load \/var\/lib\/shim-signed\/mok\/.rnd into RNG\r\n140070714560960:error:2406F079:random number generator:RAND_load_file:Cannot open file:..\/crypto\/rand\/randfile.c:88:Filename=\/var\/lib\/shim-signed\/mok\/.rnd\r\nGenerating a RSA private key\r\n.........................................................................................................................+++++\r\n.................................................+++++\r\nwriting new private key to '\/var\/lib\/shim-signed\/mok\/MOK.priv'\r\n-----\r\n\r\n-------- Uninstall Beginning --------\r\nModule:  nvidia\r\nVersion: 390.143\r\nKernel:  4.15.0-142-generic (x86_64)\r\n-------------------------------------\r\n\r\nStatus: Before uninstall, this module version was ACTIVE on this kernel.\r\n\r\nnvidia.ko:\r\n - Uninstallation\r\n   - Deleting from: \/lib\/modules\/4.15.0-142-generic\/kernel\/drivers\/char\/drm\/\r\n[...]\r\ndepmod...\r\n\r\nDKMS: install completed.\r\nThis system doesn't support Secure Boot\r\nSecure Boot not enabled on this system.\r\nW: APT had planned for dpkg to do more than it reported back (0 vs 4).\r\n   Affected packages: shim-signed:amd64\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
Monthly News \u2013 July 2018 Grub EFI amd 64 signed signed package fails on clean install mint 19 Installer Crashed with Error: the grub-efi-amd64-signed package failed to install into \/target\/ linux mint sudo mount \/dev\/sdXXX \/mnt sudo mount \/dev\/sdXX \/mnt\/boot\/efi sudo mount -t efivarfs efivarfs \/sys\/firmware\/efi\/efivars for i in \/dev \/dev\/pts \/proc \/sys \/run; do […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-8002","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/8002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8002"}],"version-history":[{"count":10,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/8002\/revisions"}],"predecessor-version":[{"id":12093,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/8002\/revisions\/12093"}],"wp:attachment":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}