Hi! On Sat, Feb 17, 2024 at 11:17:35AM +0100, Valerio Passini wrote: >Package: shim-signed >Version: 1.40+15.7-1 >Severity: normal >Tags: upstream > >Dear Maintainer, > >*** Reporter, please consider answering these questions, where appropriate *** > >I tried to install Debian on a Surface Pro 9, but it doesn't boot even with a >disabled SecureBoot (secured core must be disabled in any case). >In order to have a bootable Linux you need to hack into /efi/boot/debian and >overwrite mmx64.efi with grubx64.efi or even try more exotic actions. >Here you can find a more detailed explanation on this bug and possible working >solutions: >https://github.com/linux-surface/linux-surface/issues/1274 > >[...]The good news is: This issue is fixed on the shim main branch, so once the >distributions update their shim, this issue should disappear. The bad news is, >that it is not possible for us to fix this, since we can't get a signed shim / >MokManager from Microsoft.
We're not quite ready (yet) to have an NX-capable boot chain. There's a bit more work needed in GRUB yet. Hopefully soon. -- Steve McIntyre, Cambridge, UK. st...@einval.com "Since phone messaging became popular, the young generation has lost the ability to read or write anything that is longer than one hundred and sixty characters." -- Ignatios Souvatzis
