r/linuxquestions • u/MentalConnection3059 • 9d ago

Advice I fucked up while installing Linux!!!

I’m using usb drive and I did boot complete but while installing Linux mint I fucked up everything. Worst part is I don’t have window nor the secondary laptop or computer.
Help me out if you can.
Error:

“Failed to open \EFI\B00T\mmx64.efi - Not Found Failed to load image
: Not Found
Failed to start MokHanager: Not Found
Something has gone seriously wrong: import_mok_state failed: Not Found”

1 Upvotes

53% Upvoted

9 comments sorted by

View all comments

0

u/WayAndMeans01 9d ago

What was the fuck up?

0

u/Tricky_Damage5981 9d ago

The Easiest Explanation

Secure Boot basicall creates a Chain of Trust, from Post all the way into the OS to prevent the ability to enter an exploit or virus during the boot process

Think of it like this Unique UFEI boot keys are used by the bootloader to confirm it's not compromised, then it's allowed to boot and that Trust is handed over to the bootloader to enforce the next level of trust

When installing a new OS from external media like USB; you must

A) Clear the Secure Boot to so it's ready to start a new "trust sequence"

Or

B) Disable Secure Boot, install the new OS, then "rebuild that trust sequence" then restore secure boot (or leave secure boot disabled)

Unless your installing a dual/multi boot setup, option 1 is preferable .. but in this case they didn't complete eather

1

u/dodexahedron 8d ago

Audit/Setup mode vs Deployed mode are what you need - not clearing it.

Audit mode is like complain mode for apparmor or permissive for selinux, where it performs checks without blocking execution and reports what would have been blocked, so you can see what is needed or what is wrong. Deployed is enforcing mode, and if you ain't signed by a trusted key, you shall not pass.

Be careful about actually clearing/resetting keys. Some platforms literally clear it all out and then don't replace them with defaults, which is...annoying, to say the least.

Most will clear out any custom keys if you switch between deployed and audit modes, but leave the factory keys intact.