Drive-Trust-Alliance / sedutil

DTA sedutil Self encrypting drive software
610 stars 236 forks source link

Thinkpad T14 gen2 intel with nvme opal drive hangs booting rescue.img #415

Open jarmomak opened 1 year ago

jarmomak commented 1 year ago

I have a problem: Rescue image fails to boot. Show message decompressing root image file, but then screen goes black and T14 hangs totally. What can I do? Secure boot is disabled. At Windows 11 sedutil show my drive as Opal drive:

\.\PhysicalDrive0 2 Micron MTFDKBA1T 0002 No more disks present ending scan

sedutil is version 1.2

kamillo commented 1 year ago

Had the same issue with Lenovo L14 gen2. What worked for me eventually was removing acpi=off noapic from options passed to kernel (syslinux.cfg) in both RESCUE and UEFI images. You can find detailed instructions in #404.

gohrner commented 1 year ago

I actually had a different booting problem with an HP zBook G9.

Removing acpi=off noapic didn't help, the rescue image still would not boot, and would not even show a single bootup message - even after increasing the kernel log level.

This helped my to identify the syslinux boot loader as the culprit - the rescue image uses release 6.03. I replaced that with the syslinux version shipped in Ubuntu 22.04 (release 6.04, possibly a preview-release? Not sure if it's official.) and this actually worked.

According to the syslinux changlog, 6.04 fixes a boot hang if bootet without keyboard, even though of course the zBook DOES have a keyboard, but still - maybe that was the relevant change, maybe some other change in syslinux 6.04...

You need to replace bootx64.efi by the newer syslinux.efi and ldlinux.e64 by the corresponding version from the newer syslinux, probably in the rescure image AND in the UEFI64.img.

nspo commented 1 year ago

I experienced the same issue with a Thinkpad T14 Gen 4. For me, it was also enough to remove acpi=off noapic from the RESCUE and UEFI image's syslinux.cfg to finally get them to work!

I wanted to attach the modified files (based on 1.20.0) for the convenience of future readers but they are too large for Github. So here are two links (they should at least work for a while):

This is a sample command to mount the img files and do the modifications yourself (for when you just prefer to do it yourself or the links have died):

sudo mount -o loop,offset=1048576,rw RESCUE64.img rescue-mount/

(offset is 512 * 2048, Units times Start value from fdisk -l -u filename.img)

zygisk22 commented 4 months ago

sedutil UEFI64 PBA boot images with updated bzImage kernels that solve boot issues can be found here:

https://github.com/Drive-Trust-Alliance/sedutil/issues/404#issuecomment-2130839664