Xz 2017-01-30 21:51:49
tatertots: doesn't boot anymore
tatertots 2017-01-30 21:52:43
Xz: error?
Xz 2017-01-30 21:52:57
tatertots: nope, nothing, UEFI doesn't kick off grub
Xz 2017-01-30 21:53:21
tatertots: I'm going to a) create another USB live with ubuntu, b) boot it, c) go to EFI partition and see what's messed up
Xz 2017-01-30 21:53:28
tatertots: hopefully it's fixable
tatertots 2017-01-30 21:53:36
Xz: can you get to a virtual terminal?
ducasse 2017-01-30 21:53:38
Xz: you need to run mokutil --disable-validation
Xz 2017-01-30 21:53:57
ducasse: what's that?
Xz 2017-01-30 21:54:09
ducasse: I cannot run anything, because I don't even get to grub
Xz 2017-01-30 21:54:24
ducasse: and my UEFI doesn't feature UEFI shell
ducasse 2017-01-30 21:54:37
Xz: it tells the shim to inform the kernel not to validate signature on kernel modules
EriC^^ 2017-01-30 21:54:38
Xz: which pc model?
Xz 2017-01-30 21:54:50
ducasse: I'm booting in UEFI secure mode, that's a requirement
Xz 2017-01-30 21:55:00
EriC^^: HP Zbook 15G3
EriC^^ 2017-01-30 21:55:12
Xz: try pressing f9 when the pc boots
ducasse 2017-01-30 21:55:34
Xz: yes, you still will be. the kernel just won't be using it to validate modules.
ducasse 2017-01-30 21:56:22
Xz: alternatively you need to generate a key, add it to the mok and sign the modules yourself
Xz 2017-01-30 21:58:22
ok, here is a good news - my USB FULL install ubuntu boots fine
Xz 2017-01-30 21:58:27
it's just UEFI acting out
Xz 2017-01-30 21:58:36
after I moved that stick to another USB port - it booted all the way
Xz 2017-01-30 21:58:43
so nothing bad happened
Xz 2017-01-30 21:59:01
however, now I added 'nomodeset' to grub, booted all the way to welcome screen
Xz 2017-01-30 21:59:14
and now when I try to login - screen flickers and returns to login view
andi 2017-01-30 21:59:46
Hi, I installed ubuntu on my raid1 with lvm. I already set the rootdelay, so lvm has 5 seconds more time to start but I get the error: lvmetad is not active yet, using direct activation during sysinit.
Xz 2017-01-30 22:03:17
tatertots: what do I do now? no graphics at all ...
Xz 2017-01-30 22:04:18
by the way, I cannot insert nvidia-367, it says 'required key not available'
hateball 2017-01-30 22:05:29
Xz: I am not sure the 367 driver supports all the uefi stuff, I thought that came later
hateball 2017-01-30 22:06:13
Xz: you could try grabbing the latest driver from PPA, see if that works better: sudo add-apt-repository ppa:graphics-drivers/ppa && sudo apt update && sudo apt install nvidia-378
Xz 2017-01-30 22:06:59
hateball: first tell me how to return to noveau
Xz 2017-01-30 22:07:05
hateball: as currently I have cli only
Tazmain 2017-01-30 22:07:14
Hi all, I am running ubuntu 14.04 and when I try to update this week I keep getting ' W: Failed to fetch http://za.archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-amd64/Packages 403 Forbidden [IP: 197.155.77.2 80]' do I need to change mirrors?
hateball 2017-01-30 22:07:34
Xz: well you only need cli for what I told you
Tazmain 2017-01-30 22:07:37
and many more of these errors
hateball 2017-01-30 22:07:52
Xz: the nvidia installer will blacklist the nouveau driver in /etc/modprobe.d/
Xz 2017-01-30 22:07:53
hateball: oh, so go straigth from where I am to the other one?
Ben64 2017-01-30 22:07:54
Tazmain: yeah try a different mirror
hateball 2017-01-30 22:08:03
Xz: yeah, no harm in trying that first
Xz 2017-01-30 22:08:09
hateball: ok, fair play
Tazmain 2017-01-30 22:08:10
Ben64, is there an easy way to do it from cli ?
Xz 2017-01-30 22:08:25
hateball: ok, let me try that
Xz 2017-01-30 22:09:58
hateball: that thing won't work
Xz 2017-01-30 22:10:09
hateball: it says it wants me to disable secure-boot
Xz 2017-01-30 22:10:14
hateball: otherwise it won't work
Xz 2017-01-30 22:10:25
hateball: :o
Xz 2017-01-30 22:11:22
hateball: looks like I can only live with nouveau
zeta 2017-01-30 22:11:27
I'm trying apt-get upgrade bit it stops because mySQL 5.7.16 is a dependency, but I have 5.7.17
hateball 2017-01-30 22:12:37
Xz: oh hmmm, it seems you'll need to do a manual install pointing to proper signing keys if you want to have secure boot...
Xz 2017-01-30 22:13:04
hateball: manual install of a driver?
Xz 2017-01-30 22:13:13
hateball: yes, secure boot is a requirement
Xz 2017-01-30 22:14:33
hateball: do you know how to do that?
hateball 2017-01-30 22:14:50
Xz: Nope, havent had the need to. I am just reading some docs now
ducasse 2017-01-30 22:14:59
Xz: i told you, you can just tell the shim not to verify modules
Xz 2017-01-30 22:15:43
ducasse: ok, so you are sure that will work with secure-boot?
Xz 2017-01-30 22:15:58
ducasse: I don't understand why something optional like that would make its way to official release
ducasse 2017-01-30 22:16:02
Xz: yes, the installer also can do this.
Xz 2017-01-30 22:16:11
ducasse: ok, is it a grub option?
ducasse 2017-01-30 22:16:20
Xz: you need to run mokutil --disable-validation
Xz 2017-01-30 22:16:33
ducasse: on regular terminal? or grub?
ducasse 2017-01-30 22:16:43
Xz: from a shell
Xz 2017-01-30 22:16:59
ducasse: ok, done
Xz 2017-01-30 22:17:02
ducasse: what now?
Xz 2017-01-30 22:17:17
ducasse: should I try again load nvidia driver?
ducasse 2017-01-30 22:17:23
Xz: reboot, then you can install the nvidia driver
Xz 2017-01-30 22:17:31
ducasse: it's installed already
Xz 2017-01-30 22:17:35
ducasse: should I install again?
ducasse 2017-01-30 22:18:04
Xz: shouldn't be necessary, but i don't use nvidia myself.
Xz 2017-01-30 22:18:26
ducasse: so tell me one more thing
Xz 2017-01-30 22:18:40
ducasse: does that mokutil store its database on UEFI partition somewhere?
ducasse 2017-01-30 22:19:11
Xz: i think it's stored in the shim efi binary, actually
Xz 2017-01-30 22:19:25
ducasse: I'm asking because of a bug with UEFI on my system
Xz 2017-01-30 22:19:31
ducasse: I had to DIY my UEFI partition
ducasse 2017-01-30 22:19:41
Xz: yes, i remember
Xz 2017-01-30 22:19:57
ducasse: so whatever mokutil does to the shim it might not find its way to the boot flow
Xz 2017-01-30 22:20:12
ducasse: I copied /EFI/ubuntu onto /EFI/BOOT
Xz 2017-01-30 22:20:21
ducasse: and renamed shim.efi to bootx64.efi
zamba 2017-01-30 22:20:26
i have mounted an nfs share on my server.. when trying to access it i get permission denied
zamba 2017-01-30 22:20:32
# ls -la | grep data
zamba 2017-01-30 22:20:33
drwxrwxrwx 1 root root 1166 Jan 30 09:18 data
zamba 2017-01-30 22:20:36
what's wrong?
Xz 2017-01-30 22:21:03
ducasse: if mokutil overwrites /EFI/ubuntu/shim.efi, I can copy that again into /EFI/BOOT/bootx64.efi
ducasse 2017-01-30 22:21:07
Xz: ok, i think you just need to test this. i can't tell you for certain how that works.
Xz 2017-01-30 22:21:14
ducasse: of course
Xz 2017-01-30 22:21:17
ducasse: ok, rebooting
ducasse 2017-01-30 22:21:50
Xz: you can compare bootx64.efi with the shim to see if it's changed
Xz 2017-01-30 22:23:41
ducasse: ok, rebooted
Xz 2017-01-30 22:23:57
ducasse: I got some mokutil window during boot - so looks like something is happening
Xz 2017-01-30 22:24:05
ducasse: in mokutil window I just said 'continue to boot'
sos 2017-01-30 22:24:11
hello
Xz 2017-01-30 22:24:16
ducasse: but my problem still persists - no graphics
sos 2017-01-30 22:24:29
fools
ducasse 2017-01-30 22:24:31
Xz: try reinstalling the driver
Xz 2017-01-30 22:24:49
ducasse: apt-get remove nvidia-367 ?
ducasse 2017-01-30 22:25:00
Xz: purge it
Xz 2017-01-30 22:25:15
ducasse: only nvidia-367? or more?
ducasse 2017-01-30 22:25:39
Xz: hateball? ^^ you know nvidia better than me.
Xz 2017-01-30 22:25:51
ducasse: there might have been more pkgs
ducasse 2017-01-30 22:26:03
Xz: i think just that one
Xz 2017-01-30 22:26:25
ducasse: ok, install again?
ducasse 2017-01-30 22:26:31
Xz: yup :)
tatertots 2017-01-30 22:26:54
ChristianP?
ducasse 2017-01-30 22:26:56
Xz: it should take a little time to build
Xz 2017-01-30 22:27:54
ducasse: yeah, 338MB
hateball 2017-01-30 22:28:23
ducasse, Xz: not sure which driver you used, but maybe you need to re-run dkms after changing the mokutil stuff
hateball 2017-01-30 22:28:34
I havent dabbled with secure boot so
ducasse 2017-01-30 22:28:42
he reinstalled the driver
Xz 2017-01-30 22:29:28
hateball: what's dkms?
Xz 2017-01-30 22:29:47
hateball: I'm little concerned when it comes to UEFI/secure boot as I have corporate build on that laptop
Xz 2017-01-30 22:29:53
hateball: and I don't want things to go south
hateball 2017-01-30 22:30:16
Xz: dkms is the thing that builds the kernel modules for you
Xz 2017-01-30 22:30:30
hateball: because if I screw up Win10 that sits on internal SSD (UEFI boot/bitlocker) then I will have bigger problem
hateball 2017-01-30 22:30:47
I am thinking maybe the installer detected you were using secure boot and when you didnt choose to disable it the script halted and never built any modules
ducasse 2017-01-30 22:31:11
Xz: this should have no effect on your windows install.
Xz 2017-01-30 22:31:12
hateball: well, I didn't have an option to choose
Xz 2017-01-30 22:31:20
ducasse: *should*
Xz 2017-01-30 22:31:35
ducasse: I can disable SSD in UEFI
Xz 2017-01-30 22:32:06
ducasse: what's more interesting - when I do some changes to UEFI variables, bitlocker complains
Xz 2017-01-30 22:32:21
ducasse: and it says 'not booting, stuff in UEFI changed, against policy!'
Xz 2017-01-30 22:32:37
ducasse: then I reboot and UEFI resets stuff to default and bitlocker is happy again
Xz 2017-01-30 22:32:40
ducasse: it's scary!
ducasse 2017-01-30 22:33:18
Xz: typical ms stuff, imo.
Xz 2017-01-30 22:33:32
ducasse: ok, now I got a prompt from apt-get
Xz 2017-01-30 22:33:37
ducasse: asking about secure-boot
Xz 2017-01-30 22:33:41
ducasse: what do I do now?
Xz 2017-01-30 22:33:45
ducasse: it wants me to disable
Xz 2017-01-30 22:36:10
ducasse: it says pretty much 'UEFI secure boot is not compatible with third-party drivers'
mattstroyer 2017-01-30 22:38:15
Hi everyone! I need a advice. I am a fresh admin and i will be managing more than 20 servers. I need a software for monitoring and managing that. What could you propose me?
Xz 2017-01-30 22:41:03
ducasse: hateball: ok, rebooted - still same thing
Xz 2017-01-30 22:41:20
ducasse: hateball: nvidia driver is not loaded
hateball 2017-01-30 22:43:00
Xz: can you see if it is built and exists at all? does it error if you try loading it manually?