EFI setup for Ubuntu 22.04

[kalxas]

Following the build process fix in #2348, we now need to update the process of EFI setup.

A good solution is described here:

​https://askubuntu.com/questions/1289400/remaster-installation-image-for-ubuntu-20-10

[darkblueb]

​https://wiki.ubuntu.com/UEFI/SecureBoot#How_UEFI_Secure_Boot_works_on_Ubuntu

[darkblueb]

" I actually own a laptop that literally refuses to run anything except win8 that come with it and doesn't let me disable secure boot. People say that it is a bios bug... but there are no plans to fix the bios. " --laptop owner on YNews

[darkblueb]

YNews with many current anecdotes

​https://news.ycombinator.com/item?id=32066919

[darkblueb]

​https://wiki.archlinux.org/title/Lenovo_ThinkPad_T14/T14s_(Intel)_Gen_1#Secure_boot

[kalxas]

First pass of the fix:

​https://github.com/kalxas/OSGeoLive/commit/c7f320271555e3c095b79a8f5d8110f611f450f4

[kalxas]

Potential fix:

​https://github.com/kalxas/OSGeoLive/commit/5a5787afc880c1cb61658326e11ff9afb3f972ea

[kalxas]

build161 with the EFI fix worked fine on my laptop from a usb drive.

[kalxas]

​https://github.com/mvallim/live-custom-ubuntu-from-scratch/blob/master/scripts/build.sh#L136-L279

[darkblueb]

two indicators of a good ISO build --

$ file /home/shared/OSGEO/live-nightly-latest.iso
/home/shared/OSGEO/live-nightly-latest.iso: ISO 9660 CD-ROM filesystem data (DOS/MBR boot sector) 'OSGEOLIVE15' (bootable)

this linux file command shows the label (bootable), and also the (DOS/MBR) attribute for legacy BIOS boot

$ sudo mount /home/shared/live-nightly-latest.iso /mnt/a_disk -o loop
$ ls /mnt/a_disk/
  boot  boot.catalog  casper  dists  EFI  install  md5sum.txt  pool  preseed  
  README.diskdefines  ubuntu
$ ls /mnt/a_disk/EFI
boot
$ ls /mnt/a_disk/EFI/boot
bootx64.efi  grubx64.efi  mmx64.efi

mounting the ISO as a directory shows /boot and /EFI/boot/ parts present

[kalxas]

Lubuntu 22.04 iso creation settings:

$ xorriso -indev lubuntu-22.04-desktop-amd64.iso -report_el_torito as_mkisofs
xorriso 1.5.4 : RockRidge filesystem manipulator, libburnia project.

xorriso : NOTE : Loading ISO image tree from LBA 0
xorriso : UPDATE :     664 nodes read in 1 seconds
libisofs: NOTE : Found hidden El-Torito image for EFI.
libisofs: NOTE : EFI image start and size: 1270301 * 2048 , 8496 * 512
xorriso : NOTE : Detected El-Torito boot information which currently is set to be discarded
Drive current: -indev 'lubuntu-22.04-desktop-amd64.iso'
Media current: stdio file, overwriteable
Media status : is written , is appendable
Boot record  : El Torito , MBR protective-msdos-label grub2-mbr cyl-align-off GPT
Media summary: 1 session, 1272591 data blocks, 2486m data, 41.1g free
Volume id    : 'Lubuntu 22.04 LTS amd64'
-V 'Lubuntu 22.04 LTS amd64'
--modification-date='2022041910175400'
--grub2-mbr --interval:local_fs:0s-15s:zero_mbrpt,zero_gpt:'lubuntu-22.04-desktop-amd64.iso'
--protective-msdos-label
-partition_cyl_align off
-partition_offset 16
--mbr-force-bootable
-append_partition 2 28732ac11ff8d211ba4b00a0c93ec93b --interval:local_fs:5081204d-5089699d::'lubuntu-22.04-desktop-amd64.iso'
-appended_part_as_gpt
-iso_mbr_part_type a2a0d0ebe5b9334487c068b6b72699c7
-c '/boot.catalog'
-b '/boot/grub/i386-pc/eltorito.img'
-no-emul-boot
-boot-load-size 4
-boot-info-table
--grub2-boot-info
-eltorito-alt-boot
-e '--interval:appended_partition_2_start_1270301s_size_8496d:all::'
-no-emul-boot
-boot-load-size 8496

[kalxas]

great source of information:

​https://askubuntu.com/questions/1403546/ubuntu-22-04-build-iso-both-mbr-and-efi

[kalxas]

We are also getting this similar warning when booting the live usb drive:

​https://askubuntu.com/questions/1404757/create-custom-ubuntu-22-04-live-server-iso

[kalxas]

Latest build:

$ xorriso -indev osgeolive-nightly-build202-amd64-aa9ef11-efi.iso -report_el_torito as_mkisofs
xorriso 1.5.4 : RockRidge filesystem manipulator, libburnia project.

xorriso : NOTE : Loading ISO image tree from LBA 0
xorriso : UPDATE :     666 nodes read in 1 seconds
libisofs: NOTE : Found hidden El-Torito image for EFI.
libisofs: NOTE : EFI image start and size: 2128512 * 2048 , 8496 * 512
xorriso : NOTE : Detected El-Torito boot information which currently is set to be discarded
Drive current: -indev 'osgeolive-nightly-build202-amd64-aa9ef11-efi.iso'
Media current: stdio file, overwriteable
Media status : is written , is appendable
Boot record  : El Torito , MBR protective-msdos-label grub2-mbr cyl-align-off GPT
Media summary: 1 session, 2130802 data blocks, 4162m data, 37.0g free
Volume id    : 'OSGEOLIVE15'
-V 'OSGEOLIVE15'
--modification-date='2022080613171800'
--grub2-mbr --interval:local_fs:0s-15s:zero_mbrpt,zero_gpt:'osgeolive-nightly-build202-amd64-aa9ef11-efi.iso'
--protective-msdos-label
-partition_cyl_align off
-partition_offset 16
--mbr-force-bootable
-append_partition 2 28732ac11ff8d211ba4b00a0c93ec93b --interval:local_fs:8514048d-8522543d::'osgeolive-nightly-build202-amd64-aa9ef11-efi.iso'
-appended_part_as_gpt
-iso_mbr_part_type a2a0d0ebe5b9334487c068b6b72699c7
-c '/boot.catalog'
-b '/boot/grub/i386-pc/eltorito.img'
-no-emul-boot
-boot-load-size 4
-boot-info-table
--grub2-boot-info
-eltorito-alt-boot
-e '--interval:appended_partition_2_start_2128512s_size_8496d:all::'
-no-emul-boot
-boot-load-size 8496

[darkblueb]

dbb@asus30:/home/shared$ md5sum -c osgeolive-15.0rc1-amd64.iso.md5 
osgeolive-15.0rc1-amd64.iso: OK
dbb@asus30:/home/shared$ sudo dd if=osgeolive-15.0rc1-amd64.iso of=/dev/sdc bs=4M; sync
1040+1 records in
1040+1 records out
4363640832 bytes (4.4 GB, 4.1 GiB) copied, 1328.91 s, 3.3 MB/s

[darkblueb]

more general info

​https://wiki.debian.org/SecureBoot/VirtualMachine

​https://social.technet.microsoft.com/wiki/contents/articles/14286.converting-windows-bios-installation-to-uefi.aspx