Can't boot....weird situation [Solved]

[fehlix]

OK, I may have a view.
Adopting the information given within this thread MX-21 Secure Boot to your situation I'd see those steps:

* Boot with MX LiveUSB, which may now boot in secure-boot "disabled in shim" with either standard or also non-signed AHS kernel in the LiveUSB session.
* Open Terminal and run:

Code: Select all

sudo chroot-rescue-scan

which should find and list the installed system
=> select the isntalled system to "visit" with chroot
Do now this at the "chroot>" prompt:
Note: No "sudo" needed.
* check to verfy you can see nvram/efivars:

Code: Select all

efibootmgr -v

* check to verify the ESP is mounted at /boot/efi

Code: Select all

lsblk -f

If the last step confirm efivars are visable and ESP is mounted onto /boot/efi
Do this:
* refresh package list

Code: Select all

apt update 

and package-install signed efi-loder

Code: Select all

apt install grub-efi-amd64-signed shim-signed

when done
grub-Install twice signed efi-grub-loader and grub:

Code: Select all

grub-install --bootloader-id=MX21 --force-extra-removable

and

Code: Select all

grub-install --bootloader-id=debian --force-extra-removable

and finaly re-generate the grub-menu:

Code: Select all

update-grub

Check to see the "new" UEFI-loader listed in NVRAM:

Code: Select all

efibootmgr -v

Exit with

Code: Select all

exit

and press q Quit
Shutdown, remove/pull-out LiveUSB, and reboot.

[GlockdocVegas]

Here is a screenshot of the 1st 2 commands. Unless I am missing it, I don't see nvram or esp so I stopped until I get more info =)

Screenshot_2022-12-11_10-13-39.png

[Huckleberry Finn]

... But ... Do you have an ESP partition on hdd (sda) (fat32 formatted with boot and esp flags) or am I missing something ?

[GlockdocVegas]

Tell me how to find out and I can answer..........

Based on the output on the bottom of that screenshot I am going to say no, but I am over my head here.

[Huckleberry Finn]

Ok, just GParted on live session ...

You can create a small one (no matter where it is on disk, at the end etc.). If needed only: first shrink the MX partition a bit (from right side to left ... 100-250 MiB , or more if you like while you're at it), then create a new partition (fat32) ... finally right click on it: "Manage Flags", but both boot and esp .

Later you can try MX Boot Repair.. "Reinstall Grub" ... ESP ...

[GlockdocVegas]

I followed your instructions and created the partition, added the flags, ran boot repair, reinstall grub, esp, new partion.

Rebooted and I am back to not being able to boot the system or live usb. I get the “system did not authenticate error again”.

Bed time here in Thailand. I will tackle it again tomorrow. When this happened earlier today I was able to reflash the live usb and boot into it. i will try that tomorrow.

[Huckleberry Finn]

Ok. But at least you have an ESP partition now.. :)

(Your next trials / our suggestions won't be "in vain" ).

[fehlix]

Here is a screenshot of the 1st 2 commands. Unless I am missing it, I don't see nvram or esp so I stopped until I get more info =)


Screenshot_2022-12-11_10-13-39.png

The efibootmgr text output shows the content of NVRAM's efivars.
(I don't know why you post text as IMAGE, that's no very helpfull to help you.)
The "lsblk -f" command show you don't have an ESP (EFI System partition) on the internal drive,
which means you have probaly installed MX-21 originally within BIOS/MBR boot mode.
And probaly also the drive is created/formatted as a msdos/mbr drive instead of an GPT drive.
Now after you have reset UEFI system to factory settings, UEFI-secure boot is enabled,which seems not allow you to
boot into BIOS/MBR installed MX21.
To be honest, ISTM a bit to much of confusion created. Suggest to install from scratch in UEFI-boot mode entire disk,
followed by the advice given with the "MX 21 Secure Boot " thread to enable secureboot installed.

[GlockdocVegas]

Thank you all for your input and comments.

After setting up esp I was unable to boot into any of my live usbs or my system.

I had pretty much decided my new computer was going to be a paperweight.

BUT

I finally found the pwd jumper on the motherboard, removed it, which allowed me into bios. I was able to disable secure boot and FINALLY booted into my mx21 system on my hard drive with no problems!!!

WOOOHOOO

[fehlix]

Well, thank you both for all your input.

After setting up the ESP partition as instructed, I cannot get anything to boot. None of my live USB drives will boot. My system will not boot.

So you are saying you entered the UEFI Boot Options list ("Boot Menu") and selected on the shown list the MX LiveUSB - but it won't boot? What's shown on the screen.
In case you don't know. On most HP's you get to the Boot menu: Either by pressing Esc followed by F10 or F1, which give you a " "Startup Menu", where "Boot menu" (Boot Option list) is shown to select.
Or press Esc followed by F9 to get the Boot Options list, where UEFI bootable entries should be listed.