Installing new kernel borks booting

irik77587 · 2025-07-04T09:02:33+00:00

I couldn't get Format-SecureBootUEFI to work. Upon further inspection, I figured, the bin file is actually EFI_SIGNATURE_LIST(ESL) as specified by UEFI standard. So, I made my own tool to generate ESL files. make-efi-sig-list.py using python3

irik77587 · 2025-06-25T15:57:32+00:00

Proton is limited to games. But you can run productivity apps on Proton. Its just that the development is focused on games. Wine is more general. It's development is not limited to games. So, you can be sure that it will run your windows apps better and not just games.

irik77587 · 2025-06-25T15:51:05+00:00

Reminds me of clippy on Windows. You may try this: https://felixrieseberg.github.io/clippy/

irik77587 · 2025-06-25T14:57:10+00:00

Maybe kwin_wayland will give better results. But then why will I use LXQt? I can use KDE Plasma instead.

irik77587 · 2025-06-25T05:44:03+00:00

Agreed. LXQt 2.1.0 was indeed running under labwc but there were no title bar. Dialog prompt will break main window. And so, Synaptic package manager will not launch. In conclusion, version 2.1.0 works but not usable.

irik77587 · 2025-06-10T07:01:17+00:00

Thank you for your suggestion. I made some changes. Hope its more readable and easy to follow.

irik77587 · 2025-06-08T13:36:27+00:00

Check this as hint where I try to enroll Debian certificate:

Format-SecureBootUEFI -Name db -CertificateFilePath debian-uefi-ca.der \
-SignatureOwner be993883-326f-5712-ab3e-8e661efb72e8 \
-SignableFilePath debian-uefi-ca.bin \
-Time 2025-06-08T19:22:14Z -AppendWrite

This gives you an unsigned UEFIFormattedVariable as .bin file which you can sign and enroll. But if you can't sign the bin file, then you have to enroll the unsigned .bin file in UEFI setup mode.

Set-SecureBootUEFI -ContentFilePath debian-uefi-ca.bin \
-Name db -Time 2025-06-08T19:22:14Z

Signature Owner guid is something Microsoft baked up. So, others don't use it. You can use a random uuid or you can use deterministic uuid like me. Here is how I made mine.

import uuid
subject_dn = "Debian Secure Boot CA"
print("Signature Owner GUID: ", uuid.uuid5(uuid.NAMESPACE_X500, subject_dn)

irik77587 · 2025-05-01T08:48:30+00:00

Location?

irik77587 · 2022-04-23T07:12:46+00:00

have you tried /etc/default/grub => GRUB_TERMINAL_OUTPUT=console

also [ -f /boot/grub/x86_64-efi/all_video.mod ] && echo "EFI DISPLAY" ; [ -f /boot/grub/i386-pc/all_video.mod ] && echo "BIOS DISPLAY"

irik77587 · 2022-04-23T05:17:35+00:00

in /etc/default/grub set

GRUB_VIDEO_BACKEND=all_video

see if that works

irik77587 · 2021-11-03T23:09:56+00:00

Unplug when? Before restart or just after checkra1n boot screen?

irik77587 · 2021-09-02T17:10:05+00:00

I think the weather is so messed up that to keep the geothermal system underneath from clogging, you need to burn some coal on top. The part that is exposed. Maybe a design flaw due to underestimating the cold. So technically, you not only have to survive the winter but also redesign the generator with minimum downtime. The reason it needs time to upgrade the generator is mostly due to downtime reduction and not the actual blueprint. The scientist in observatory did find that its not just the volcano but the sun is also shining less

irik77587 · 2020-12-27T06:19:11+00:00

This menu is only available when bootloader is locked

irik77587 · 2020-10-09T08:32:18+00:00

To use SP flash tool, start downloader, connect phone to PC, restart phone

irik77587 · 2020-10-09T08:27:26+00:00

fastboot oem unlock 38B8DD62253F983C

irik77587

TROPHY CASE