Open mailinglists35 opened 5 years ago
fresh install of fc31 xfce iso flavour
efi secure boot
note that on fc31 the entries are no longer JUST in /boot/efi/EFI/fedora/grub.cfg
but also the main entries are in /boot/loader/entries/b2f754e0ff6542d4942aa55930f2badb-5.3.7-301.fc31.x86_64.conf
(random uuid for each entry)
https://www.freedesktop.org/wiki/Specifications/BootLoaderSpec/
grep -C2 blscfg /boot/efi/EFI/fedora/grub.cfg
# will be lost the next time file is regenerated. Instead edit the BootLoaderSpec files.
#
# The blscfg command parses the BootLoaderSpec files stored in /boot/loader/entries and
# populates the boot menu. Please refer to the Boot Loader Specification documentation
# for the files format: https://www.freedesktop.org/wiki/Specifications/BootLoaderSpec/.
--
set default_kernelopts="root=/dev/mapper/root_lv-root ro rd.luks.uuid=luks-c1e2339a-a965-4d1f-b7c0-51d88c6bcaed rd.lvm.lv=root_lv/root rhgb quiet"
insmod blscfg
blscfg
enabled by default on rhel 8 & clones and post fedora 31
this affects bios setups as well, not just efi
the script is right to tell there is no grub configuration, because with BLS enabled, /boot/grub2/grub.cfg has no kernel entries. instead they are moved into separate files in /boot/loader/entries/*.conf
[root@optiplex ~]# tree -I '*.mod' /boot/
/boot/
├── config-5.4.17-2036.104.5.el8uek.x86_64
├── efi
│ └── EFI
│ └── redhat
├── grub2
│ ├── device.map
│ ├── fonts
│ │ └── unicode.pf2
│ ├── grub.cfg
│ ├── grubenv
│ └── i386-pc
│ ├── boot.img
│ ├── command.lst
│ ├── core.img
│ ├── crypto.lst
│ ├── fs.lst
│ ├── load.cfg
│ ├── moddep.lst
│ ├── modinfo.sh
│ ├── partmap.lst
│ ├── parttool.lst
│ ├── terminal.lst
│ └── video.lst
├── initramfs-0-rescue-1cf5faf2482d43329cdc1b7a583798b2.img
├── initramfs-5.4.17-2036.104.5.el8uek.x86_64.img
├── initramfs-5.4.17-2036.104.5.el8uek.x86_64kdump.img
├── loader
│ └── entries
│ ├── 1cf5faf2482d43329cdc1b7a583798b2-0-rescue.conf
│ └── 1cf5faf2482d43329cdc1b7a583798b2-5.4.17-2036.104.5.el8uek.x86_64.conf
├── lost+found
├── symvers-5.4.17-2036.104.5.el8uek.x86_64.gz
├── System.map-5.4.17-2036.104.5.el8uek.x86_64
├── vmlinuz-0-rescue-1cf5faf2482d43329cdc1b7a583798b2
└── vmlinuz-5.4.17-2036.104.5.el8uek.x86_64
[root@optiplex ~]# egrep -i 'kernel|linux' /boot/grub2/grub.cfg|grep -v ^\#
if [ -z "${kernelopts}" ]; then
set kernelopts="root=/dev/mapper/ol-root ro crashkernel=auto resume=/dev/mapper/ol-swap rd.luks.uuid=luks-3d45e902-8a78-4a92-b756-636ccaa21e34 rd.lvm.lv=ol/root rd.lvm.lv=ol/swap "