Installation of Linux Mint and secure boot

[Micik]

Hello Linux Mint community. Today, I have installed to try linux OS and chosen Linux Mint since I‘ve read it is the recommended distro for users with windows background.

So I have installed linux mint 20 Ulyana on my HP mini prodesk 400 computer (i5 8th gen, 256 GB Sk hynix Nvme drive). Before, on this computer was installed windows 10 (preinstalled from manufacturer/seller). The installation was straightforward, just clicking next and I have chosen to erase disk and install Linux on the drive.

After installation has been completed (without errors) and reboot is done, the computer didn’t start. There was an error message something like “invalid signature” with kernel version number and suggestion that kernel needs to be loaded first, whatever that means. So, after a bit googling I have found solution. The solution is to go to the Bios and to chose option “Legacy boot enable and Secure boot disable”. The original setting was vice versa.
So my question is why this happened. The secure boot was enabled before Linux Mint installation, and OS is installed without any errors. So, why it didn’t start? During installation I chose default option to erase disk, so everything was clean.

[dave8671]

Hi
Why do you need secure boot on? Disabling Secure Boot is not a big deal does not add security. It's primary goal is for Microsoft to enforce its vendor lock on your computer. With it on Linux Mint may not boot at all. turn if off than it most like will. I have always turned it off never looked back. Duel booting win10 and LM is a whole another issue.

[SMG]

The solution is to go to the Bios and to chose option “Legacy boot enable and Secure boot disable”.

Booting UEFI or Legacy Mode and Enabling or Disabling Secure Boot are usually two different settings in BIOS/UEFI. They have two different functions. Are you saying it is one combined setting on your computer?

It is not required to disable Secure Boot in order to install or run Linux Mint. It is also not required for the firmware to be in Legacy Mode. If that was the case, you would not have been able to boot the installation usb/dvd. Since you were able to do that, it sounds like there may have been a different issue.

Without knowing the specific errors you were receiving, it's hard to say what happened, but my guess would be your computer still had Windows in the efiboot order. That is a function in BIOS and erasing and installing Mint can not change that setting. You have to change it.

[Micik]

Hi
Why do you need secure boot on? Disabling Secure Boot is not a big deal does not add security. It's primary goal is for Microsoft to enforce its vendor lock on your computer. With it on Linux Mint may not boot at all. turn if off than it most like will. I have always turned it off never looked back. Duel booting win10 and LM is a whole another issue.

I don't need secure boot and in fact I'm not really sure what it is. This was default option in the BIOS that was chosen while win 10 was installed. I performed installation of Linux Mint with erase disk option and couldn't boot.
I'm interested to learn what was that an issue.

[SMG]

I'm interested to learn what was that an issue.

That is an interesting setting for a BIOS/UEFI.

As I mentioned in my prior post, it sounds like your computer was set for booting Windows in EFI mode and if that setting is still listed in the BIOS/UEFI, that might explain what happened. However, the image you posted seems to indicate your system may be set up differently than what we normally see. We will need more information about your hardware and how Mint sees it to have a better idea of what may have happened.

Please give us information about your install by entering this command in a terminal: inxi -Fxxxrz
Click </> from the mini toolbar above the textbox where you type your reply and then place your cursor between the code markers and paste the results of the command between the code markers [code]Results[/code]. This will let us know how Mint sees your hardware.

[Micik]

Unfortunately due to some other issue with unsupported HW, I had to move back and install win 10.
I already collect data here, but that is probably not a complete information.
https://termbin.com/1nme

Code: Select all

 inxi -Fxxxrz
System:
  Kernel: 5.4.0-74-generic x86_64 bits: 64 compiler: gcc v: 9.3.0 
  Desktop: MATE 1.24.0 info: mate-panel wm: marco 1.24.0 dm: LightDM 1.30.0 
  Distro: Linux Mint 20.2 Uma base: Ubuntu 20.04 focal 
Machine:
  Type: Desktop System: HP product: HP ProDesk 400 G4 DM v: N/A 
  serial: <filter> Chassis: type: 6 serial: <filter> 
  Mobo: HP model: 83F3 v: KBC Version 07.D1.00 serial: <filter> UEFI: HP 
  v: Q23 Ver. 02.16.00 date: 04/16/2021 
CPU:
  Topology: 6-Core model: Intel Core i5-8500T bits: 64 type: MCP 
  arch: Kaby Lake rev: A L2 cache: 9216 KiB 
  flags: avx avx2 lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx 
  bogomips: 25199 
  Speed: 800 MHz min/max: 800/3500 MHz Core speeds (MHz): 1: 800 2: 800 
  3: 800 4: 800 5: 801 6: 800 
Graphics:
  Device-1: Intel UHD Graphics 630 vendor: Hewlett-Packard driver: i915 
  v: kernel bus ID: 00:02.0 chip ID: 8086:3e92 
  Display: x11 server: X.Org 1.20.9 driver: modesetting unloaded: fbdev,vesa 
  compositor: marco v: 1.24.0 resolution: 1920x1080~50Hz 
  OpenGL: renderer: Mesa Intel UHD Graphics 630 (CFL GT2) v: 4.6 Mesa 20.2.6 
  direct render: Yes 
Audio:
  Device-1: Intel Cannon Lake PCH cAVS vendor: Hewlett-Packard 
  driver: snd_hda_intel v: kernel bus ID: 00:1f.3 chip ID: 8086:a348 
  Sound Server: ALSA v: k5.4.0-74-generic 
Network:
  Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet 
  vendor: Hewlett-Packard driver: r8169 v: kernel port: 3000 bus ID: 02:00.0 
  chip ID: 10ec:8168 
  IF: enp2s0 state: up speed: 100 Mbps duplex: full mac: <filter> 
Drives:
  Local Storage: total: 704.24 GiB used: 8.72 GiB (1.2%) 
  ID-1: /dev/nvme0n1 vendor: SK Hynix model: PC401 NVMe 256GB 
  size: 238.47 GiB speed: 31.6 Gb/s lanes: 4 serial: <filter> rev: 80006E00 
  scheme: GPT 
  ID-2: /dev/sda vendor: Seagate model: ST500LX012-SSHD-8GB size: 465.76 GiB 
  speed: 6.0 Gb/s rotation: 5400 rpm serial: <filter> rev: LVM1 scheme: GPT 
Partition:
  ID-1: / size: 233.24 GiB used: 8.71 GiB (3.7%) fs: ext4 
  dev: /dev/nvme0n1p2 
Sensors:
  System Temperatures: cpu: 58.0 C mobo: N/A 
  Fan Speeds (RPM): N/A 
Repos:
  No active apt repos in: /etc/apt/sources.list 
  Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list 
  1: deb http://packages.linuxmint.com uma main upstream import backport #id:linuxmint_main
  2: deb http://archive.ubuntu.com/ubuntu focal main restricted universe multiverse
  3: deb http://archive.ubuntu.com/ubuntu focal-updates main restricted universe multiverse
  4: deb http://archive.ubuntu.com/ubuntu focal-backports main restricted universe multiverse
  5: deb http://security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
  6: deb http://archive.canonical.com/ubuntu/ focal partner
Info:
  Processes: 229 Uptime: 2m Memory: 7.62 GiB used: 1003.2 MiB (12.9%) 
  Init: systemd v: 245 runlevel: 5 Compilers: gcc: 9.3.0 alt: 9 Shell: bash 
  v: 5.0.17 running in: mate-terminal inxi: 3.0.38

In any case, it is HP mini Prodesk 400 G4.

[deepakdeshp]

Unfortunately due to some other issue with unsupported HW, I had to move back and install win 10.
I already collect data here, but that is probably not a complete information.
https://termbin.com/1nme

Code: Select all

 inxi -Fxxxrz
System:
  Kernel: 5.4.0-74-generic x86_64 bits: 64 compiler: gcc v: 9.3.0 
  Desktop: MATE 1.24.0 info: mate-panel wm: marco 1.24.0 dm: LightDM 1.30.0 
  Distro: Linux Mint 20.2 Uma base: Ubuntu 20.04 focal 
Machine:
  Type: Desktop System: HP product: HP ProDesk 400 G4 DM v: N/A 
  serial: <filter> Chassis: type: 6 serial: <filter> 
  Mobo: HP model: 83F3 v: KBC Version 07.D1.00 serial: <filter> UEFI: HP 
  v: Q23 Ver. 02.16.00 date: 04/16/2021 
CPU:
  Topology: 6-Core model: Intel Core i5-8500T bits: 64 type: MCP 
  arch: Kaby Lake rev: A L2 cache: 9216 KiB 
  flags: avx avx2 lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx 
  bogomips: 25199 
  Speed: 800 MHz min/max: 800/3500 MHz Core speeds (MHz): 1: 800 2: 800 
  3: 800 4: 800 5: 801 6: 800 
Graphics:
  Device-1: Intel UHD Graphics 630 vendor: Hewlett-Packard driver: i915 
  v: kernel bus ID: 00:02.0 chip ID: 8086:3e92 
  Display: x11 server: X.Org 1.20.9 driver: modesetting unloaded: fbdev,vesa 
  compositor: marco v: 1.24.0 resolution: 1920x1080~50Hz 
  OpenGL: renderer: Mesa Intel UHD Graphics 630 (CFL GT2) v: 4.6 Mesa 20.2.6 
  direct render: Yes 
Audio:
  Device-1: Intel Cannon Lake PCH cAVS vendor: Hewlett-Packard 
  driver: snd_hda_intel v: kernel bus ID: 00:1f.3 chip ID: 8086:a348 
  Sound Server: ALSA v: k5.4.0-74-generic 
Network:
  Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet 
  vendor: Hewlett-Packard driver: r8169 v: kernel port: 3000 bus ID: 02:00.0 
  chip ID: 10ec:8168 
  IF: enp2s0 state: up speed: 100 Mbps duplex: full mac: <filter> 
Drives:
  Local Storage: total: 704.24 GiB used: 8.72 GiB (1.2%) 
  ID-1: /dev/nvme0n1 vendor: SK Hynix model: PC401 NVMe 256GB 
  size: 238.47 GiB speed: 31.6 Gb/s lanes: 4 serial: <filter> rev: 80006E00 
  scheme: GPT 
  ID-2: /dev/sda vendor: Seagate model: ST500LX012-SSHD-8GB size: 465.76 GiB 
  speed: 6.0 Gb/s rotation: 5400 rpm serial: <filter> rev: LVM1 scheme: GPT 
Partition:
  ID-1: / size: 233.24 GiB used: 8.71 GiB (3.7%) fs: ext4 
  dev: /dev/nvme0n1p2 
Sensors:
  System Temperatures: cpu: 58.0 C mobo: N/A 
  Fan Speeds (RPM): N/A 
Repos:
  No active apt repos in: /etc/apt/sources.list 
  Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list 
  1: deb http://packages.linuxmint.com uma main upstream import backport #id:linuxmint_main
  2: deb http://archive.ubuntu.com/ubuntu focal main restricted universe multiverse
  3: deb http://archive.ubuntu.com/ubuntu focal-updates main restricted universe multiverse
  4: deb http://archive.ubuntu.com/ubuntu focal-backports main restricted universe multiverse
  5: deb http://security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
  6: deb http://archive.canonical.com/ubuntu/ focal partner
Info:
  Processes: 229 Uptime: 2m Memory: 7.62 GiB used: 1003.2 MiB (12.9%) 
  Init: systemd v: 245 runlevel: 5 Compilers: gcc: 9.3.0 alt: 9 Shell: bash 
  v: 5.0.17 running in: mate-terminal inxi: 3.0.38

In any case, it is HP mini Prodesk 400 G4.

Most of the hardware is supported by Mint. I expect your machine would be supported too. Boot from live USB and test if all hardware is working. If any problems please report here.

[SMG]

Unfortunately due to some other issue with unsupported HW, I had to move back and install win 10.

Which kernels did you try? Usually, we suggest trying the 5.11 or the 5.13-oem kernel when there are hardware issues. Those can only be used on LM20 versions.

You can test the 5.11 kernel with the Linux Mint 20.2 "Uma" - Cinnamon (Edge, 64-bit) ISO. There is not a MATE version available; you would have to install Linux Mint 20.2 MATE and then upgrade the kernel in Update Manager to get 5.11 with MATE.

When one has an 8th-gen Intel or newer, I usually recommend at least testing the newer 5.11 kernel. Enough people had issues with the 5.4 kernel which were resolved by just changing to the newer kernel that it's a common recommendation to make.

I found Interactive BIOS simulator: HP Pro Desk 400 G4 DM (35W) and it appears one can either use 'EFI and Secure Boot' or 'Legacy mode with Secure Boot disabled'. That is the first time I've seen something like that. However, either one should work with Linux Mint.

The data you have listed seems to indicate you booted in UEFI mode when you generated that inxi data. Not only is UEFI showing in the system information, but your disk is GPT. Usually, those go together.

Using the BIOS Simulator, I selected Advanced Options and Boot order. Their sample shows the Windows Boot Manager as first in the UEFI Boot Order. If that was the setting after you installed Mint, I would expect that would cause problems booting. That setting can not be changed by the Mint installer. You would have to check and make any necessary changes there. That may have been the source of the problem.

The information I found for the Intel Core i5-8500T indicates it does not have onboard graphics and a separate graphics card is needed. However, your data seems to indicate you are using onboard graphics? Does that sound correct to you? Maybe you have some specialized version of that cpu?

Let us know if you have questions before making a future attempt at Linux Mint.

[Micik]

Hello SMG and thank you for the reply.
First of all, I was and I am able to boot to Linux Mint, but after I changed option in BIOS from Disable Legacy and Enable Secure boot to Enable legacy and Disable secure boot. I have created this thread to understand why I was able to delete windows installation (was GPT and UEFI with secure boot enabled) without any problems or warnings and than to fail on the very first boot attempt. But I get it now.

Regarding the update the kernel, I tried that according to the following instructions:

Code: Select all

https://www.youtube.com/watch?v=gc6qS01OaVI

That is, I tried with mainline, but when trying to execute fist command to add to repository, I was stopped with the following error:

Code: Select all

:~$ sudo add-apt-repository ppa:cappelikan/ppa
You are about to add the following PPA:
 Mainline Ubuntu Kernel Installer https://github.com/bkw777/mainline
 More info: https://launchpad.net/~cappelikan/+archive/ubuntu/ppa
Press Enter to continue or Ctrl+C to cancel

Executing: /tmp/apt-key-gpghome.EymbhBlBbK/gpg.1.sh --keyserver hkps://keyserver.ubuntu.com:443 --recv-keys 3AE27527713D2479DCAFFD58A89D7C1B2F76304D
gpg: keyserver receive failed: General error

[SMG]

Regarding the update the kernel, I tried that according to the following instructions:

That is, I tried with mainline, but when trying to execute fist command to add to repository, I was stopped with the following error:

We do not recommend using mainline kernels. The kernels used in Mint are maintained by Canonical/Ubuntu and are not mainline kernels.

Only if one's hardware is very new and the drivers are not available in any of the Canonical-maintained kernels would we recommend using a mainline kernel. Your computer's cpu is not that new and I would not expect you would need a mainline kernel to get it to function properly.

[Micik]

Hello SMG,
Is it possible to use Update manager to update from cinnamon 20.2?
Please have a look at the attached file. Should I use Update manager to try to update the kernel without downloading the new version Linux Mint? If this is the case, can you explain how?

Thank you!

[SMG]

Hello SMG,
Is it possible to use Update manager to update from cinnamon 20.2?
Please have a look at the attached file. Should I use Update manager to try to update the kernel without downloading the new version Linux Mint? If this is the case, can you explain how?

I did not think you had Mint installed on the hard drive which is why I suggested testing the newer kernel using the ISO.

If you have Linux Mint 20.2 Cinnamon installed on your hard drive, then you can upgrade the kernel using Update Manager.

Instructions for upgrading to the 5.11 kernel:

• Open Update Manager.
• Select View > Linux Kernels and click Continue.
• Make sure 5.11 is selected on the left panel and then click the top-most option on the right panel. An "Install" button will appear.
• Install the kernel and then reboot for it to become active.