Foxboron / sbctl

:computer: :lock: :key: Secure Boot key manager
MIT License
1.35k stars 71 forks source link

`sbctl verify` different output everytime #281

Closed TheBabu closed 5 months ago

TheBabu commented 5 months ago

I was recently able to successfully set up secure boot using sbctl via this reddit post. And I have verified this when I run sbctl status. However, I see that the output of sbctl verify can vary wildy every time I run it. I do dual boot windows and Arch Linux, and I also have a MSI motheboard.

Here is a screenshot of what I mean: image

And an asciinema recording of the weird behavior: https://asciinema.org/a/631378

It doesn't really affect me, since I secure boot is enabled and both Linux and Windows both recognize that secure boot is enabled, I was just wondering why I am seeing this behavior / is this a bug?. Also could be a sympton of the errors that I'm getting?

Foxboron commented 5 months ago

sbctl verify aborts on errors and the for-loop doesn't act on a ordered data structure. Remove /boot/FSCK0001.REC as a temporary solution and I should probably not have it hard-abort on errors.

TheBabu commented 5 months ago

I see, is removing FSCK____.REC safe then?