search

Mattiwatti / EfiGuard

Disable PatchGuard and Driver Signature Enforcement at boot time
GNU General Public License v3.0
1.78k stars 337 forks source link

Ventoy support #91

Closed acoul closed 1 year ago

acoul commented 1 year ago

Can EfiGuard be used with Ventoy ? I tried to create an iso out of a USB key, but I failed :(

Mattiwatti commented 1 year ago

I just tried this, and the short version is that no, it doesn't look like it can. The reason for this is the fact that EfiGuard is unloading itself when you are booting into Ventoy instead of booting the Windows Boot Manager directly, because it thinks you're booting something other than Windows. Well, you are booting something other than Windows, it just so happens that Ventoy can also chainboot Windows, which I agree, EfiGuard should support.

So the good news is that I know what the issue is and I can probably fix it, but the bad news is that the naive fix (simply not unloading the driver) leads to other potential issues, for instance: the sequence

  1. EfiGuard
  2. Ventoy or similar boot manager
  3. Linux

breaks with this fix, and in a worse way, because Linux does not even boot. This surprises me a little, since I don't recall ever having an urgent need to unload the DXE driver when not booting Windows, I just thought it would be neater this way. So I will have to investigate some more to figure out a fix for this that works with all operating systems.

Mattiwatti commented 1 year ago

9aff366 should fix this. Thanks for reporting.