Re: GRUB can't chainload Windows under Secure Boot

[Andrei Borzenkov]

07.12.2016 21:37, Giovanni Santini пишет:
> Good evening,
> I have a strange issue with GRUB.
> I have multiple OSes on my laptop and one of them is Windows.
> GRUB detects it properly and can chainload it...
> When Secure Boot (from now on SB) is disabled.
> 
> When SB is on, I receive a pretty strange error message, similar to:
> 

Upstream GRUB does not support secure boot at all, so you need to raise
bug report to your distribution. Each is using slightly different
version of secure boot patch so it is impossible to give blanket answer.

> /EndEntire
> file path:
> /ACPI(yadda)/PCI(yadda)/Sata(0,0,0)/HD(yaddayadda)/File(\EFI\Microsoft\Boot)/File(bootmgfw.efi)/EndEntire
> error: cannot load image.
> 

I am aware of at least one problem (incorrect parsing of executable
format when secure boot is active) that was fixed in openSUSE grub package.

> Some peculiar notes:
> - GRUB can boot behind SB. I can the Secure Boot EFI variables and they
> report a successful secure boot.
> - The same executable (bootmgfw.efi) is loaded properly from the UEFI
> firmware.
> - GRUB, to boot behind SB, was setted up to work with Preloader and
> HashTool.
> 
> I can provide any kind of logs you can think of.
> The only thing I am missing are ideas of what to do for fixing it ;(
> 
> I hope to have some feedback soon!
> Thanks in advance.
>