Installation of Linux Mint and secure boot
Forum rules
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Installation of Linux Mint and secure boot
Hello Linux Mint community. Today, I have installed to try linux OS and chosen Linux Mint since I‘ve read it is the recommended distro for users with windows background.
So I have installed linux mint 20 Ulyana on my HP mini prodesk 400 computer (i5 8th gen, 256 GB Sk hynix Nvme drive). Before, on this computer was installed windows 10 (preinstalled from manufacturer/seller). The installation was straightforward, just clicking next and I have chosen to erase disk and install Linux on the drive.
After installation has been completed (without errors) and reboot is done, the computer didn’t start. There was an error message something like “invalid signature” with kernel version number and suggestion that kernel needs to be loaded first, whatever that means. So, after a bit googling I have found solution. The solution is to go to the Bios and to chose option “Legacy boot enable and Secure boot disable”. The original setting was vice versa.
So my question is why this happened. The secure boot was enabled before Linux Mint installation, and OS is installed without any errors. So, why it didn’t start? During installation I chose default option to erase disk, so everything was clean.
So I have installed linux mint 20 Ulyana on my HP mini prodesk 400 computer (i5 8th gen, 256 GB Sk hynix Nvme drive). Before, on this computer was installed windows 10 (preinstalled from manufacturer/seller). The installation was straightforward, just clicking next and I have chosen to erase disk and install Linux on the drive.
After installation has been completed (without errors) and reboot is done, the computer didn’t start. There was an error message something like “invalid signature” with kernel version number and suggestion that kernel needs to be loaded first, whatever that means. So, after a bit googling I have found solution. The solution is to go to the Bios and to chose option “Legacy boot enable and Secure boot disable”. The original setting was vice versa.
So my question is why this happened. The secure boot was enabled before Linux Mint installation, and OS is installed without any errors. So, why it didn’t start? During installation I chose default option to erase disk, so everything was clean.
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 1 time in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
Distro: Linux Mint 20.3 Una, Desktop: Cinnamon 5.2.7, Kernel: 5.4.0-100-generic x86_64
Re: Installation of Linux Mint and secure boot
Hi
Why do you need secure boot on? Disabling Secure Boot is not a big deal does not add security. It's primary goal is for Microsoft to enforce its vendor lock on your computer. With it on Linux Mint may not boot at all. turn if off than it most like will. I have always turned it off never looked back. Duel booting win10 and LM is a whole another issue.
Why do you need secure boot on? Disabling Secure Boot is not a big deal does not add security. It's primary goal is for Microsoft to enforce its vendor lock on your computer. With it on Linux Mint may not boot at all. turn if off than it most like will. I have always turned it off never looked back. Duel booting win10 and LM is a whole another issue.
Re: Installation of Linux Mint and secure boot
Booting UEFI or Legacy Mode and Enabling or Disabling Secure Boot are usually two different settings in BIOS/UEFI. They have two different functions. Are you saying it is one combined setting on your computer?
It is not required to disable Secure Boot in order to install or run Linux Mint. It is also not required for the firmware to be in Legacy Mode. If that was the case, you would not have been able to boot the installation usb/dvd. Since you were able to do that, it sounds like there may have been a different issue.
Without knowing the specific errors you were receiving, it's hard to say what happened, but my guess would be your computer still had Windows in the efiboot order. That is a function in BIOS and erasing and installing Mint can not change that setting. You have to change it.
A woman typing on a laptop with LM20.3 Cinnamon.
Re: Installation of Linux Mint and secure boot
I don't need secure boot and in fact I'm not really sure what it is. This was default option in the BIOS that was chosen while win 10 was installed. I performed installation of Linux Mint with erase disk option and couldn't boot.dave8671 wrote: ⤴Sat Oct 16, 2021 9:44 pm Hi
Why do you need secure boot on? Disabling Secure Boot is not a big deal does not add security. It's primary goal is for Microsoft to enforce its vendor lock on your computer. With it on Linux Mint may not boot at all. turn if off than it most like will. I have always turned it off never looked back. Duel booting win10 and LM is a whole another issue.
I'm interested to learn what was that an issue.
Distro: Linux Mint 20.3 Una, Desktop: Cinnamon 5.2.7, Kernel: 5.4.0-100-generic x86_64
Re: Installation of Linux Mint and secure boot
That is an interesting setting for a BIOS/UEFI.
As I mentioned in my prior post, it sounds like your computer was set for booting Windows in EFI mode and if that setting is still listed in the BIOS/UEFI, that might explain what happened. However, the image you posted seems to indicate your system may be set up differently than what we normally see. We will need more information about your hardware and how Mint sees it to have a better idea of what may have happened.
Please give us information about your install by entering this command in a terminal:
inxi -Fxxxrz
Click
</>
from the mini toolbar above the textbox where you type your reply and then place your cursor between the code markers and paste the results of the command between the code markers [code]
Results[/code]
. This will let us know how Mint sees your hardware.A woman typing on a laptop with LM20.3 Cinnamon.
Re: Installation of Linux Mint and secure boot
Unfortunately due to some other issue with unsupported HW, I had to move back and install win 10.
I already collect data here, but that is probably not a complete information.
https://termbin.com/1nme
In any case, it is HP mini Prodesk 400 G4.
I already collect data here, but that is probably not a complete information.
https://termbin.com/1nme
Code: Select all
inxi -Fxxxrz
System:
Kernel: 5.4.0-74-generic x86_64 bits: 64 compiler: gcc v: 9.3.0
Desktop: MATE 1.24.0 info: mate-panel wm: marco 1.24.0 dm: LightDM 1.30.0
Distro: Linux Mint 20.2 Uma base: Ubuntu 20.04 focal
Machine:
Type: Desktop System: HP product: HP ProDesk 400 G4 DM v: N/A
serial: <filter> Chassis: type: 6 serial: <filter>
Mobo: HP model: 83F3 v: KBC Version 07.D1.00 serial: <filter> UEFI: HP
v: Q23 Ver. 02.16.00 date: 04/16/2021
CPU:
Topology: 6-Core model: Intel Core i5-8500T bits: 64 type: MCP
arch: Kaby Lake rev: A L2 cache: 9216 KiB
flags: avx avx2 lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
bogomips: 25199
Speed: 800 MHz min/max: 800/3500 MHz Core speeds (MHz): 1: 800 2: 800
3: 800 4: 800 5: 801 6: 800
Graphics:
Device-1: Intel UHD Graphics 630 vendor: Hewlett-Packard driver: i915
v: kernel bus ID: 00:02.0 chip ID: 8086:3e92
Display: x11 server: X.Org 1.20.9 driver: modesetting unloaded: fbdev,vesa
compositor: marco v: 1.24.0 resolution: 1920x1080~50Hz
OpenGL: renderer: Mesa Intel UHD Graphics 630 (CFL GT2) v: 4.6 Mesa 20.2.6
direct render: Yes
Audio:
Device-1: Intel Cannon Lake PCH cAVS vendor: Hewlett-Packard
driver: snd_hda_intel v: kernel bus ID: 00:1f.3 chip ID: 8086:a348
Sound Server: ALSA v: k5.4.0-74-generic
Network:
Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet
vendor: Hewlett-Packard driver: r8169 v: kernel port: 3000 bus ID: 02:00.0
chip ID: 10ec:8168
IF: enp2s0 state: up speed: 100 Mbps duplex: full mac: <filter>
Drives:
Local Storage: total: 704.24 GiB used: 8.72 GiB (1.2%)
ID-1: /dev/nvme0n1 vendor: SK Hynix model: PC401 NVMe 256GB
size: 238.47 GiB speed: 31.6 Gb/s lanes: 4 serial: <filter> rev: 80006E00
scheme: GPT
ID-2: /dev/sda vendor: Seagate model: ST500LX012-SSHD-8GB size: 465.76 GiB
speed: 6.0 Gb/s rotation: 5400 rpm serial: <filter> rev: LVM1 scheme: GPT
Partition:
ID-1: / size: 233.24 GiB used: 8.71 GiB (3.7%) fs: ext4
dev: /dev/nvme0n1p2
Sensors:
System Temperatures: cpu: 58.0 C mobo: N/A
Fan Speeds (RPM): N/A
Repos:
No active apt repos in: /etc/apt/sources.list
Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list
1: deb http://packages.linuxmint.com uma main upstream import backport #id:linuxmint_main
2: deb http://archive.ubuntu.com/ubuntu focal main restricted universe multiverse
3: deb http://archive.ubuntu.com/ubuntu focal-updates main restricted universe multiverse
4: deb http://archive.ubuntu.com/ubuntu focal-backports main restricted universe multiverse
5: deb http://security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
6: deb http://archive.canonical.com/ubuntu/ focal partner
Info:
Processes: 229 Uptime: 2m Memory: 7.62 GiB used: 1003.2 MiB (12.9%)
Init: systemd v: 245 runlevel: 5 Compilers: gcc: 9.3.0 alt: 9 Shell: bash
v: 5.0.17 running in: mate-terminal inxi: 3.0.38
Distro: Linux Mint 20.3 Una, Desktop: Cinnamon 5.2.7, Kernel: 5.4.0-100-generic x86_64
-
- Level 20
- Posts: 12341
- Joined: Sun Aug 09, 2015 10:00 am
Re: Installation of Linux Mint and secure boot
Most of the hardware is supported by Mint. I expect your machine would be supported too. Boot from live USB and test if all hardware is working. If any problems please report here.Micik wrote: ⤴Sun Oct 17, 2021 11:19 am Unfortunately due to some other issue with unsupported HW, I had to move back and install win 10.
I already collect data here, but that is probably not a complete information.
https://termbin.com/1nme
In any case, it is HP mini Prodesk 400 G4.Code: Select all
inxi -Fxxxrz System: Kernel: 5.4.0-74-generic x86_64 bits: 64 compiler: gcc v: 9.3.0 Desktop: MATE 1.24.0 info: mate-panel wm: marco 1.24.0 dm: LightDM 1.30.0 Distro: Linux Mint 20.2 Uma base: Ubuntu 20.04 focal Machine: Type: Desktop System: HP product: HP ProDesk 400 G4 DM v: N/A serial: <filter> Chassis: type: 6 serial: <filter> Mobo: HP model: 83F3 v: KBC Version 07.D1.00 serial: <filter> UEFI: HP v: Q23 Ver. 02.16.00 date: 04/16/2021 CPU: Topology: 6-Core model: Intel Core i5-8500T bits: 64 type: MCP arch: Kaby Lake rev: A L2 cache: 9216 KiB flags: avx avx2 lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips: 25199 Speed: 800 MHz min/max: 800/3500 MHz Core speeds (MHz): 1: 800 2: 800 3: 800 4: 800 5: 801 6: 800 Graphics: Device-1: Intel UHD Graphics 630 vendor: Hewlett-Packard driver: i915 v: kernel bus ID: 00:02.0 chip ID: 8086:3e92 Display: x11 server: X.Org 1.20.9 driver: modesetting unloaded: fbdev,vesa compositor: marco v: 1.24.0 resolution: 1920x1080~50Hz OpenGL: renderer: Mesa Intel UHD Graphics 630 (CFL GT2) v: 4.6 Mesa 20.2.6 direct render: Yes Audio: Device-1: Intel Cannon Lake PCH cAVS vendor: Hewlett-Packard driver: snd_hda_intel v: kernel bus ID: 00:1f.3 chip ID: 8086:a348 Sound Server: ALSA v: k5.4.0-74-generic Network: Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet vendor: Hewlett-Packard driver: r8169 v: kernel port: 3000 bus ID: 02:00.0 chip ID: 10ec:8168 IF: enp2s0 state: up speed: 100 Mbps duplex: full mac: <filter> Drives: Local Storage: total: 704.24 GiB used: 8.72 GiB (1.2%) ID-1: /dev/nvme0n1 vendor: SK Hynix model: PC401 NVMe 256GB size: 238.47 GiB speed: 31.6 Gb/s lanes: 4 serial: <filter> rev: 80006E00 scheme: GPT ID-2: /dev/sda vendor: Seagate model: ST500LX012-SSHD-8GB size: 465.76 GiB speed: 6.0 Gb/s rotation: 5400 rpm serial: <filter> rev: LVM1 scheme: GPT Partition: ID-1: / size: 233.24 GiB used: 8.71 GiB (3.7%) fs: ext4 dev: /dev/nvme0n1p2 Sensors: System Temperatures: cpu: 58.0 C mobo: N/A Fan Speeds (RPM): N/A Repos: No active apt repos in: /etc/apt/sources.list Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list 1: deb http://packages.linuxmint.com uma main upstream import backport #id:linuxmint_main 2: deb http://archive.ubuntu.com/ubuntu focal main restricted universe multiverse 3: deb http://archive.ubuntu.com/ubuntu focal-updates main restricted universe multiverse 4: deb http://archive.ubuntu.com/ubuntu focal-backports main restricted universe multiverse 5: deb http://security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse 6: deb http://archive.canonical.com/ubuntu/ focal partner Info: Processes: 229 Uptime: 2m Memory: 7.62 GiB used: 1003.2 MiB (12.9%) Init: systemd v: 245 runlevel: 5 Compilers: gcc: 9.3.0 alt: 9 Shell: bash v: 5.0.17 running in: mate-terminal inxi: 3.0.38
If I have helped you solve a problem, please add [SOLVED] to your first post title, it helps other users looking for help.
Regards,
Deepak
Mint 21.1 Cinnamon 64 bit with AMD A6 / 8GB
Mint 21.1 Cinnamon AMD Ryzen3500U/8gb
Regards,
Deepak
Mint 21.1 Cinnamon 64 bit with AMD A6 / 8GB
Mint 21.1 Cinnamon AMD Ryzen3500U/8gb
Re: Installation of Linux Mint and secure boot
Which kernels did you try? Usually, we suggest trying the 5.11 or the 5.13-oem kernel when there are hardware issues. Those can only be used on LM20 versions.
You can test the 5.11 kernel with the Linux Mint 20.2 "Uma" - Cinnamon (Edge, 64-bit) ISO. There is not a MATE version available; you would have to install Linux Mint 20.2 MATE and then upgrade the kernel in Update Manager to get 5.11 with MATE.
When one has an 8th-gen Intel or newer, I usually recommend at least testing the newer 5.11 kernel. Enough people had issues with the 5.4 kernel which were resolved by just changing to the newer kernel that it's a common recommendation to make.
I found Interactive BIOS simulator: HP Pro Desk 400 G4 DM (35W) and it appears one can either use 'EFI and Secure Boot' or 'Legacy mode with Secure Boot disabled'. That is the first time I've seen something like that. However, either one should work with Linux Mint.
The data you have listed seems to indicate you booted in UEFI mode when you generated that inxi data. Not only is UEFI showing in the system information, but your disk is GPT. Usually, those go together.
Using the BIOS Simulator, I selected Advanced Options and Boot order. Their sample shows the Windows Boot Manager as first in the UEFI Boot Order. If that was the setting after you installed Mint, I would expect that would cause problems booting. That setting can not be changed by the Mint installer. You would have to check and make any necessary changes there. That may have been the source of the problem.
The information I found for the Intel Core i5-8500T indicates it does not have onboard graphics and a separate graphics card is needed. However, your data seems to indicate you are using onboard graphics? Does that sound correct to you? Maybe you have some specialized version of that cpu?
Let us know if you have questions before making a future attempt at Linux Mint.
A woman typing on a laptop with LM20.3 Cinnamon.
Re: Installation of Linux Mint and secure boot
Hello SMG and thank you for the reply.
First of all, I was and I am able to boot to Linux Mint, but after I changed option in BIOS from Disable Legacy and Enable Secure boot to Enable legacy and Disable secure boot. I have created this thread to understand why I was able to delete windows installation (was GPT and UEFI with secure boot enabled) without any problems or warnings and than to fail on the very first boot attempt. But I get it now.
Regarding the update the kernel, I tried that according to the following instructions:
That is, I tried with mainline, but when trying to execute fist command to add to repository, I was stopped with the following error:
First of all, I was and I am able to boot to Linux Mint, but after I changed option in BIOS from Disable Legacy and Enable Secure boot to Enable legacy and Disable secure boot. I have created this thread to understand why I was able to delete windows installation (was GPT and UEFI with secure boot enabled) without any problems or warnings and than to fail on the very first boot attempt. But I get it now.
Regarding the update the kernel, I tried that according to the following instructions:
Code: Select all
https://www.youtube.com/watch?v=gc6qS01OaVI
Code: Select all
:~$ sudo add-apt-repository ppa:cappelikan/ppa
You are about to add the following PPA:
Mainline Ubuntu Kernel Installer https://github.com/bkw777/mainline
More info: https://launchpad.net/~cappelikan/+archive/ubuntu/ppa
Press Enter to continue or Ctrl+C to cancel
Executing: /tmp/apt-key-gpghome.EymbhBlBbK/gpg.1.sh --keyserver hkps://keyserver.ubuntu.com:443 --recv-keys 3AE27527713D2479DCAFFD58A89D7C1B2F76304D
gpg: keyserver receive failed: General error
Distro: Linux Mint 20.3 Una, Desktop: Cinnamon 5.2.7, Kernel: 5.4.0-100-generic x86_64
Re: Installation of Linux Mint and secure boot
We do not recommend using mainline kernels. The kernels used in Mint are maintained by Canonical/Ubuntu and are not mainline kernels.
Only if one's hardware is very new and the drivers are not available in any of the Canonical-maintained kernels would we recommend using a mainline kernel. Your computer's cpu is not that new and I would not expect you would need a mainline kernel to get it to function properly.
A woman typing on a laptop with LM20.3 Cinnamon.
Re: Installation of Linux Mint and secure boot
Hello SMG,
Is it possible to use Update manager to update from cinnamon 20.2?
Please have a look at the attached file. Should I use Update manager to try to update the kernel without downloading the new version Linux Mint? If this is the case, can you explain how?
Thank you!
Is it possible to use Update manager to update from cinnamon 20.2?
Please have a look at the attached file. Should I use Update manager to try to update the kernel without downloading the new version Linux Mint? If this is the case, can you explain how?
Thank you!
Distro: Linux Mint 20.3 Una, Desktop: Cinnamon 5.2.7, Kernel: 5.4.0-100-generic x86_64
Re: Installation of Linux Mint and secure boot
I did not think you had Mint installed on the hard drive which is why I suggested testing the newer kernel using the ISO.Micik wrote: ⤴Wed Oct 20, 2021 9:00 am Hello SMG,
Is it possible to use Update manager to update from cinnamon 20.2?
Please have a look at the attached file. Should I use Update manager to try to update the kernel without downloading the new version Linux Mint? If this is the case, can you explain how?
If you have Linux Mint 20.2 Cinnamon installed on your hard drive, then you can upgrade the kernel using Update Manager.
Instructions for upgrading to the 5.11 kernel:
- Open Update Manager.
- Select View > Linux Kernels and click Continue.
- Make sure 5.11 is selected on the left panel and then click the top-most option on the right panel. An "Install" button will appear.
- Install the kernel and then reboot for it to become active.
A woman typing on a laptop with LM20.3 Cinnamon.