Difference between revisions of "Package:Shim"

From Funtoo
Jump to navigation Jump to search
(clean up)
(add secure boot insertion description.)
Line 1: Line 1:
{{note|testing}}
we have fedora's EFI secure boot shim.  this page is not functional yet.  [[Secure_Boot]] has detailed instructions.
we have fedora's EFI secure boot shim.  this page is not functional yet.  [[Secure_Boot]] has detailed instructions.


Line 23: Line 21:
}}
}}


===uefi secure boot===
*press the f1 f2 f8 f9 f10 esc or delete to load bios.
*set bios to load uefi usb devices first, disable secure boot, and enable legacy mode.  save settings and exit.
*press the f1 f2 f8 f9 f10 esc or delete to load your boot selection menu.
*load EFI from file, point to /boot/EFI/FUNTOO/shim
*shim will greet you with access violation warnings.
*fiddle around to get mok manager to load up.
*select add key
*point to /boot/EFI/FUNTOO/grubx86.efi
*press the f1 f2 f8 f9 f10 esc or delete key to load your boot selection menu.
*load EFI from file, and again point to /boot/EFI/FUNTOO/shim which will now load funtoo under secure boot.
===fallback default efi partition===
{{console|body=
{{console|body=
###i## mkdir /boot/EFI/BOOT
###i## mkdir /boot/EFI/BOOT
###i## cp /boot/EFI/FUNTOO/* /boot/EFI/BOOT/
###i## cp /boot/EFI/FUNTOO/* /boot/EFI/BOOT/
###i## cp /usr/share/shim/* /boot/EFI/BOOT/
}}
}}




https://blog.uncooperative.org/blog/2014/02/06/the-efi-system-partition/
https://blog.uncooperative.org/blog/2014/02/06/the-efi-system-partition/

Revision as of 08:33, December 5, 2020

we have fedora's EFI secure boot shim. this page is not functional yet. Secure_Boot has detailed instructions.

sys-boot/shim

    Homepage:            https://apps.fedoraproject.org/packages/shim/
    Description:         Fedora's signed UEFI shim
root # emerge sys-boot/shim

these files are added to the system:

  • /usr/share/shim/BOOTIA32.EFI
  • /usr/share/shim/BOOTX64.EFI
  • /usr/share/shim/mmia32.efi
  • /usr/share/shim/mmx64.efi


root # mkdir /boot/EFI/FUNTOO
root # cp /usr/share/shim/* /boot/EFI/FUNTOO/

uefi secure boot

  • press the f1 f2 f8 f9 f10 esc or delete to load bios.
  • set bios to load uefi usb devices first, disable secure boot, and enable legacy mode. save settings and exit.
  • press the f1 f2 f8 f9 f10 esc or delete to load your boot selection menu.
  • load EFI from file, point to /boot/EFI/FUNTOO/shim
  • shim will greet you with access violation warnings.
  • fiddle around to get mok manager to load up.
  • select add key
  • point to /boot/EFI/FUNTOO/grubx86.efi
  • press the f1 f2 f8 f9 f10 esc or delete key to load your boot selection menu.
  • load EFI from file, and again point to /boot/EFI/FUNTOO/shim which will now load funtoo under secure boot.

fallback default efi partition

root # mkdir /boot/EFI/BOOT
root # cp /boot/EFI/FUNTOO/* /boot/EFI/BOOT/


https://blog.uncooperative.org/blog/2014/02/06/the-efi-system-partition/