On 2023-09-27 at 18:04, Valerio Vanni wrote: > Il 27/09/2023 05:22, Jeffrey Walton ha scritto: > >> On Tue, Sep 26, 2023 at 10:20 PM Valerio Vanni >> <valerio.va...@inwind.it> wrote:
>>> 3) At next boots, secure boot refuses to boot from Clonezilla >>> live 2.8.1-12. The error is >>> "verification failed 0x1A security violation" >>> Windows 10 can still start, and shows secure boot active. Only if >>> I disable secure boot from BIOS, I can start clonezilla. >>> >>> 4) I reflash BIOS, same version, and go to point 1. >>> >>> Tested many times. >> >> The failure at (3) sounds like what happened when old grub images >> were blacklisted in the UEFI Revocation List dbx. Also see >> <https://lwn.net/Articles/827403/>. >> >> You should probably stop doing (4). > > But this way I would have to disable secure boot to load old Clonezilla. > Disable secure boot, launch clonezilla, restore image, reenable secure > boot, start OS. Well, why do you need to load old Clonezilla? Surely the new version of the Clonezilla live boot environment should work just as well as the old one? The only candidate reasons I can think of are "I have data files which I still need to use with the Clonezilla live boot environment, and the old version includes tools which are compatible with those files, but the new one does not", and "I have a lot of already-created boot media with the old version of the Clonezilla live boot environment, and I don't want to discard or re-create all of that boot media". The former would be a valid reason, but would also seem a bit odd; backwards-incompatible breaks like that do not AFAIK tend to come along very often, especially not in system-imaging solutions. The latter would be understandable, but you'd have the choice between doing that discard-all-the-old thing, or living with the downsides of disabling Secure Boot. -- The Wanderer The reasonable man adapts himself to the world; the unreasonable one persists in trying to adapt the world to himself. Therefore all progress depends on the unreasonable man. -- George Bernard Shaw
signature.asc
Description: OpenPGP digital signature
