I had this happen with a Bookworm 12.7 MATE live ISO: https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/debian-live-12.7.0-amd64-mate.iso
In my case, it was due to bootloader-config needing to install some packages, and trying to reach out to a debian server without an internet connection. The process hangs at or about "Need to get 4,631 kB of archives". I created two LUKS encrypted partitions for / and /boot (ie. selected ext4 and checked [] encrypt). In my case, I had a hardwired ethernet connection to a small embedded board (similar to a beaglebone black), and had not established a wifi connection within the live session. The ethernet connection defaults to being the default route, unless the connection is edited and "Only use this connection for resources on it's network" is selected (which of course doesn't happen in the installer). I opened a MATE Terminal window and ran sudo bootloader-config --help, an option that bootloader config doesn't recognize. Instead, the program ran immediately. That invocation of bootloader-config hung, Once I created a WiFi connection, the process immediately continued and successfully completed. The strange thing is that it doesn't look like any remote packages were downloaded at all - bootloader-config just needed to get past the point where it insisted on talking to a debian server. It's not clear whether this would have happened if I didn't have the ethernet connection that was not a gateway ... root@debian:~# bootloader-config --help Reading package lists... Done Building dependency tree... Done Reading state information... Done cryptsetup-initramfs is already the newest version (2:2.6.1-4~deb12u2). cryptsetup is already the newest version (2:2.6.1-4~deb12u2). keyutils is already the newest version (1.6.3-2). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Running bootloader-config... * Installing grub-efi (uefi)... Reading package lists... Done Building dependency tree... Done Reading state information... Done The following additional packages will be installed: efibootmgr grub-efi-amd64-bin grub-efi-amd64-signed grub2-common mokutil shim-helpers-amd64-signed shim-signed shim-signed-common shim-unsigned The following NEW packages will be installed: efibootmgr grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed grub2-common mokutil shim-helpers-amd64-signed shim-signed shim-signed-common shim-unsigned 0 upgraded, 10 newly installed, 0 to remove and 0 not upgraded. Need to get 4,631 kB of archives. After this operation, 40.1 MB of additional disk space will be used. Ign:1 http://deb.debian.org/debian bookworm/main amd64 efibootmgr amd64 17-2 Ign:2 http://deb.debian.org/debian bookworm/main amd64 grub2-common amd64 2.06-13+deb12u1 Ign:3 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-bin amd64 2.06-13+deb12u1 Ign:4 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64 amd64 2.06-13+deb12u1 Ign:5 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-signed amd64 1+2.06+13+deb12u1 Ign:6 http://deb.debian.org/debian bookworm/main amd64 mokutil amd64 0.6.0-2 Ign:7 http://deb.debian.org/debian bookworm/main amd64 shim-unsigned amd64 15.8-1~deb12u1 Ign:8 http://deb.debian.org/debian bookworm/main amd64 shim-helpers-amd64-signed amd64 1+15.8+1~deb12u1 Ign:9 http://deb.debian.org/debian bookworm/main amd64 shim-signed-common all 1.44~1+deb12u1+15.8-1~deb12u1 Ign:10 http://deb.debian.org/debian bookworm/main amd64 shim-signed amd64 1.44~1+deb12u1+15.8-1~deb12u1 Ign:1 http://deb.debian.org/debian bookworm/main amd64 efibootmgr amd64 17-2 Ign:2 http://deb.debian.org/debian bookworm/main amd64 grub2-common amd64 2.06-13+deb12u1 Ign:3 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-bin amd64 2.06-13+deb12u1 Ign:4 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64 amd64 2.06-13+deb12u1 Ign:5 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-signed amd64 1+2.06+13+deb12u1 Ign:6 http://deb.debian.org/debian bookworm/main amd64 mokutil amd64 0.6.0-2 Ign:7 http://deb.debian.org/debian bookworm/main amd64 shim-unsigned amd64 15.8-1~deb12u1 Ign:8 http://deb.debian.org/debian bookworm/main amd64 shim-helpers-amd64-signed amd64 1+15.8+1~deb12u1 Ign:9 http://deb.debian.org/debian bookworm/main amd64 shim-signed-common all 1.44~1+deb12u1+15.8-1~deb12u1 Ign:10 http://deb.debian.org/debian bookworm/main amd64 shim-signed amd64 1.44~1+deb12u1+15.8-1~deb12u1 Ign:1 http://deb.debian.org/debian bookworm/main amd64 efibootmgr amd64 17-2 Ign:2 http://deb.debian.org/debian bookworm/main amd64 grub2-common amd64 2.06-13+deb12u1 Ign:3 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-bin amd64 2.06-13+deb12u1 Ign:4 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64 amd64 2.06-13+deb12u1 Ign:5 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-signed amd64 1+2.06+13+deb12u1 Ign:6 http://deb.debian.org/debian bookworm/main amd64 mokutil amd64 0.6.0-2 Ign:7 http://deb.debian.org/debian bookworm/main amd64 shim-unsigned amd64 15.8-1~deb12u1 Ign:8 http://deb.debian.org/debian bookworm/main amd64 shim-helpers-amd64-signed amd64 1+15.8+1~deb12u1 Ign:9 http://deb.debian.org/debian bookworm/main amd64 shim-signed-common all 1.44~1+deb12u1+15.8-1~deb12u1 Ign:10 http://deb.debian.org/debian bookworm/main amd64 shim-signed amd64 1.44~1+deb12u1+15.8-1~deb12u1 Ign:1 http://deb.debian.org/debian bookworm/main amd64 efibootmgr amd64 17-2 Ign:2 http://deb.debian.org/debian bookworm/main amd64 grub2-common amd64 2.06-13+deb12u1 Ign:3 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-bin amd64 2.06-13+deb12u1 Ign:4 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64 amd64 2.06-13+deb12u1 Ign:5 http://deb.debian.org/debian bookworm/main amd64 grub-efi-amd64-signed amd64 1+2.06+13+deb12u1 Ign:6 http://deb.debian.org/debian bookworm/main amd64 mokutil amd64 0.6.0-2 Ign:7 http://deb.debian.org/debian bookworm/main amd64 shim-unsigned amd64 15.8-1~deb12u1 Get:1 file:/run/live/medium bookworm/main amd64 efibootmgr amd64 17-2 [27.6 kB] Ign:8 http://deb.debian.org/debian bookworm/main amd64 shim-helpers-amd64-signed amd64 1+15.8+1~deb12u1 Ign:9 http://deb.debian.org/debian bookworm/main amd64 shim-signed-common all 1.44~1+deb12u1+15.8-1~deb12u1 Ign:10 http://deb.debian.org/debian bookworm/main amd64 shim-signed amd64 1.44~1+deb12u1+15.8-1~deb12u1 Get:2 file:/run/live/medium bookworm/main amd64 grub2-common amd64 2.06-13+deb12u1 [614 kB] Get:3 file:/run/live/medium bookworm/main amd64 grub-efi-amd64-bin amd64 2.06-13+deb12u1 [1,574 kB] Get:4 file:/run/live/medium bookworm/main amd64 grub-efi-amd64 amd64 2.06-13+deb12u1 [45.7 kB] Get:5 file:/run/live/medium bookworm/main amd64 grub-efi-amd64-signed amd64 1+2.06+13+deb12u1 [1,259 kB] Get:6 file:/run/live/medium bookworm/main amd64 mokutil amd64 0.6.0-2 [26.9 kB] Get:7 file:/run/live/medium bookworm/main amd64 shim-unsigned amd64 15.8-1~deb12u1 [440 kB] Get:8 file:/run/live/medium bookworm/main amd64 shim-helpers-amd64-signed amd64 1+15.8+1~deb12u1 [301 kB] Get:9 file:/run/live/medium bookworm/main amd64 shim-signed-common all 1.44~1+deb12u1+15.8-1~deb12u1 [13.6 kB] Get:10 file:/run/live/medium bookworm/main amd64 shim-signed amd64 1.44~1+deb12u1+15.8-1~deb12u1 [329 kB] Preconfiguring packages ... E: Can not write log (Is /dev/pts mounted?) - posix_openpt (19: No such device) Selecting previously unselected package efibootmgr. (Reading database ... 292775 files and directories currently installed.) Preparing to unpack .../0-efibootmgr_17-2_amd64.deb ... Unpacking efibootmgr (17-2) ... Selecting previously unselected package grub2-common. Preparing to unpack .../1-grub2-common_2.06-13+deb12u1_amd64.deb ... Unpacking grub2-common (2.06-13+deb12u1) ... Selecting previously unselected package grub-efi-amd64-bin. Preparing to unpack .../2-grub-efi-amd64-bin_2.06-13+deb12u1_amd64.deb ... Unpacking grub-efi-amd64-bin (2.06-13+deb12u1) ... Selecting previously unselected package grub-efi-amd64. Preparing to unpack .../3-grub-efi-amd64_2.06-13+deb12u1_amd64.deb ... Unpacking grub-efi-amd64 (2.06-13+deb12u1) ... Selecting previously unselected package grub-efi-amd64-signed. Preparing to unpack .../4-grub-efi-amd64-signed_1+2.06+13+deb12u1_amd64.deb ... Unpacking grub-efi-amd64-signed (1+2.06+13+deb12u1) ... Selecting previously unselected package mokutil. Preparing to unpack .../5-mokutil_0.6.0-2_amd64.deb ... Unpacking mokutil (0.6.0-2) ... Selecting previously unselected package shim-unsigned:amd64. Preparing to unpack .../6-shim-unsigned_15.8-1~deb12u1_amd64.deb ... Unpacking shim-unsigned:amd64 (15.8-1~deb12u1) ... Selecting previously unselected package shim-helpers-amd64-signed. Preparing to unpack .../7-shim-helpers-amd64-signed_1+15.8+1~deb12u1_amd64.deb ... Unpacking shim-helpers-amd64-signed (1+15.8+1~deb12u1) ... Selecting previously unselected package shim-signed-common. Preparing to unpack .../8-shim-signed-common_1.44~1+deb12u1+15.8-1~deb12u1_all.deb ... Unpacking shim-signed-common (1.44~1+deb12u1+15.8-1~deb12u1) ... Selecting previously unselected package shim-signed:amd64. Preparing to unpack .../9-shim-signed_1.44~1+deb12u1+15.8-1~deb12u1_amd64.deb ... Unpacking shim-signed:amd64 (1.44~1+deb12u1+15.8-1~deb12u1) ... Setting up efibootmgr (17-2) ... Setting up mokutil (0.6.0-2) ... Setting up grub-efi-amd64-signed (1+2.06+13+deb12u1) ... Setting up grub2-common (2.06-13+deb12u1) ... Setting up shim-signed-common (1.44~1+deb12u1+15.8-1~deb12u1) ... No DKMS packages installed: not changing Secure Boot validation state. Setting up grub-efi-amd64-bin (2.06-13+deb12u1) ... Setting up shim-unsigned:amd64 (15.8-1~deb12u1) ... Setting up grub-efi-amd64 (2.06-13+deb12u1) ... Creating config file /etc/default/grub with new version Installing for x86_64-efi platform. grub-install: error: attempt to install to encrypted disk without cryptodisk enabled. Set `GRUB_ENABLE_CRYPTODISK=y' in file `/etc/default/grub'. Failed: grub-install --target=x86_64-efi WARNING: Bootloader is not properly installed, system may not be bootable Setting up shim-helpers-amd64-signed (1+15.8+1~deb12u1) ... Installing for x86_64-efi platform. grub-install: error: attempt to install to encrypted disk without cryptodisk enabled. Set `GRUB_ENABLE_CRYPTODISK=y' in file `/etc/default/grub'. Failed: grub-install --target=x86_64-efi WARNING: Bootloader is not properly installed, system may not be bootable Setting up shim-signed:amd64 (1.44~1+deb12u1+15.8-1~deb12u1) ... Installing for x86_64-efi platform. grub-install: error: attempt to install to encrypted disk without cryptodisk enabled. Set `GRUB_ENABLE_CRYPTODISK=y' in file `/etc/default/grub'. Failed: grub-install --target=x86_64-efi WARNING: Bootloader is not properly installed, system may not be bootable No DKMS packages installed: not changing Secure Boot validation state. Processing triggers for man-db (2.11.2-2) ... Generating grub configuration file ... Found linux image: /boot/vmlinuz-6.1.0-25-amd64 Found initrd image: /boot/initrd.img-6.1.0-25-amd64 Warning: os-prober will be executed to detect other bootable partitions. Its output will be used to detect bootable binaries on them and create new boot entries. Found Windows Boot Manager on /dev/nvme0n1p2@/EFI/Microsoft/Boot/bootmgfw.efi Adding boot menu entry for UEFI Firmware Settings ... done
