summaryrefslogtreecommitdiffhomepage
path: root/tech/cheatsheet.mdwn
diff options
context:
space:
mode:
Diffstat (limited to 'tech/cheatsheet.mdwn')
-rw-r--r--tech/cheatsheet.mdwn22
1 files changed, 21 insertions, 1 deletions
diff --git a/tech/cheatsheet.mdwn b/tech/cheatsheet.mdwn
index a8dd84d..33accd3 100644
--- a/tech/cheatsheet.mdwn
+++ b/tech/cheatsheet.mdwn
@@ -19,4 +19,24 @@ It's the LVM part that I don't seem to be able to memorise.
`grub-install --target=x86_64-efi`
-My ThinkPad x220 additionally needs `--force-extra-removable`.
+Note that a removable drive may be mounted at `/boot/efi`. It is not
+clear whether grub-install(1)'s `--removable` option can work with
+`GRUB_ENABLE_CRYPTODISK`, so just mount the removable drive to
+`/boot/efi`.
+
+Some machines, such as my ThinkPad x220, will only boot from the
+fallback bootloader location, `/boot/efi/EFI/BOOT/BOOTX64.EFI`.
+Passing `--force-extra-removable` to grub-install(1) is meant to copy
+`/boot/efi/EFI/debian/grubx64.efi` to
+`/boot/efi/EFI/BOOT/BOOTX64.EFI`. You can manually create
+`/boot/efi/EFI/BOOT` and copy the file yourself, however, as a
+fallback.
+
+If the machine does not support UEFI Secure Boot, but grub-install
+installs the Secure Boot shim to `/boot/efi/EFI/*/bootx64.efi`, the
+machine may not boot. The proper solution is to `apt-get purge
+shim-helpers-amd64-signed shim-signed shim-signed-common
+shim-unsigned`, and then `--force-extra-removable` should copy the
+right file to `bootx64.efi`. If it doesn't, should be able to
+`/boot/efi/EFI/debian/grubx64.efi` to `/boot/efi/EFI/BOOT/BOOTX64.EFI`
+as a workaround to get the machine to boot.