Debian 11 supports Secure Boot.
I'm aware it supports Secure Boot but I have I switched off at the moment because my Ventoy HDD containing ISOs for various OS's doesn't work with it on.
What does "fails to boot" mean, exactly? What happens when the machine starts? What do you actually see?
The Dell PC reports back saying there is no bootable devices on the selected UEFI path.
I seem to have found a solution for clean installs but don't understand why this isn't implemented in the default installations too. If I boot to the installer media and go to
Advanced options >
Expert install and then in the
Debian installer main menu select the
Install the GRUB boot loader this seems to allow my PC to boot to GRUB menu which it did not before.
This is the output of the currently working UEFI installation
Code: Select all
root@L-SRV-7040:/# fdisk -l
Disk /dev/nvme0n1: 465.76 GiB, 500107862016 bytes, 976773168 sectors
Disk model: CT500P5PSSD8
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: 8FE46E7B-58BE-43EF-BC88-21532B3F04D1
Device Start End Sectors Size Type
/dev/nvme0n1p1 2048 1050623 1048576 512M EFI System
/dev/nvme0n1p2 1050624 974772223 973721600 464.3G Linux filesystem
/dev/nvme0n1p3 974772224 976771071 1998848 976M Linux swap
Code: Select all
root@L-SRV-7040:/# efibootmgr -v
BootCurrent: 0000
Timeout: 1 seconds
BootOrder: 0000
Boot0000* debian HD(1,GPT,8306046c-a375-49ed-b1be-3a648597a01d,0x800,0x100000)/File(\EFI\debian\shimx64.efi)
This is the directory structure of the working Debian installation
Code: Select all
├── boot
│ ├── config-5.15.53-1-pve
│ ├── efi
│ │ └── EFI
│ │ ├── BOOT
│ │ │ ├── BOOTX64.EFI
│ │ │ ├── fbx64.efi
│ │ │ └── grubx64.efi
│ │ └── debian
│ │ ├── BOOTX64.CSV
│ │ ├── fbx64.efi
│ │ ├── grub.cfg
│ │ ├── grubx64.efi
│ │ ├── mmx64.efi
│ │ └── shimx64.efi
The directory structure below is what would be a non-working installation. To cut a long story short, I have Proxmox installed and I have span up a Debian VM this time just using the
Install option. Ironically UEFI actually works on this VM, so at least I'm able to boot into it and grab information about the system easily.
Code: Select all
├── boot
│ ├── config-5.10.0-18-amd64
│ ├── efi
│ │ └── EFI
│ │ └── debian
│ │ ├── BOOTX64.CSV
│ │ ├── fbx64.efi
│ │ ├── grub.cfg
│ │ ├── grubx64.efi
│ │ ├── mmx64.efi
│ │ └── shimx64.efi
From comparing the two directory tress, in the non-expert install (the second tree listing) there is no
/boot/efi/EFI/BOOT directory and files. If I run the two commands on the VM too, I get the same results
Code: Select all
root@debian:/# fdisk -l
Disk /dev/sda: 32 GiB, 34359738368 bytes, 67108864 sectors
Disk model: QEMU HARDDISK
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: CC88EA60-B322-4EC2-9C0A-DFFD52C4813A
Device Start End Sectors Size Type
/dev/sda1 2048 1050623 1048576 512M EFI System
/dev/sda2 1050624 65107967 64057344 30.5G Linux filesystem
/dev/sda3 65107968 67106815 1998848 976M Linux swap
Code: Select all
root@debian:/# efibootmgr -v
BootCurrent: 0008
Timeout: 3 seconds
BootOrder: 0008,0002,0001,0000,0003
Boot0000* UiApp FvVol(7cb8bdc9-f8eb-4f34-aaea-3ee4af6516a1)/FvFile(462caa21-7614-4503-836e-8ab6f4662331)
Boot0001* UEFI QEMU QEMU CD-ROM PciRoot(0x0)/Pci(0x5,0x0)/SCSI(0,1)N.....YM....R,Y.
Boot0002* UEFI QEMU QEMU HARDDISK PciRoot(0x0)/Pci(0x5,0x0)/SCSI(0,0)N.....YM....R,Y.
Boot0003* EFI Internal Shell FvVol(7cb8bdc9-f8eb-4f34-aaea-3ee4af6516a1)/FvFile(7c04a583-9e3e-4f1c-ad65-e05268d0b4d1)
Boot0008* debian HD(1,GPT,086a4cd6-0541-4f00-84db-0d3b6a17e384,0x800,0x100000)/File(\EFI\debian\shimx64.efi)