OPNsense Forum

English Forums => Tutorials and FAQs => Topic started by: fjp on January 18, 2025, 11:07:47 PM

Title: reboot after installation fails with "Secure Boot is disabled." error.
Post by: fjp on January 18, 2025, 11:07:47 PM
I am trying to install OPNsense on Protectli V1410 that came with Ubuntu installed. I followed the installation instructions to install on the internal nvme drive. No hiccups during the installation procedure. But when I rebooted the machine (with the usb installer flashdrive removed) I invariably get the following error:

  Secure Boot is disabled.
  Booting 'Ubuntu' failed due to 'Not Found'.

Huh? Why is it trying to boot Ubuntu? I've been trying to debug this over the past 2 days. Out of ideas.  My last attempt was to use gdisk to blow away and create a new (empty) GPT on the nvme drive and then trying the OPNinstaller again. It didn't work.

This has got me pulling my hair out. It's as if the infernal machine 'knows' that it once had Ubuntu installed on it and it doesn't want to let go. 

For the record, exactly the same error occurs if I try to install pfSense. Also if I reinstall Ubuntu, it boots just fine into Ubuntu. I swear, it doesn't want to let go of Ubuntu.

Any thoughts from the wizards?


 
Title: Re: reboot after installation fails with "Secure Boot is disabled." error.
Post by: Patrick M. Hausen on January 18, 2025, 11:37:31 PM
"BIOS" setup settings?
Title: Re: reboot after installation fails with "Secure Boot is disabled." error.
Post by: meyergru on January 19, 2025, 12:14:38 AM
AFAIK, Protectli devices use coreboot which is presumably UEFI only. If the machine tries to boot Ubuntu, then the BIOS/UEFI settings are such that the old partition is still selected there. I think you will have to go to the BIOS and change boot order.

I have no such device, but it seems this is all very well documented:

https://kb.protectli.com/kb/installing-os-and-setting-boot-order-with-coreboot-on-the-vp2410/
Title: Re: reboot after installation fails with "Secure Boot is disabled." error.
Post by: fjp on January 19, 2025, 05:18:01 AM
Thanks wizards! Changing the boot order did the trick. If I seem a little dense, it's because working at the BIOS/UEFI level is new to me. I'm a retired professor who used to employ wizards to do this kind of thing for me.

Maybe one of you experts could explain something I still don't understand: Why did "Ubuntu" come up in the list of devices?  Did Protectli labeled the NVME with "Ubuntu"? If so, how did the label survive my deletion of the GPT?

Thanks again for the education! -- F
Title: Re: reboot after installation fails with "Secure Boot is disabled." error.
Post by: meyergru on January 19, 2025, 10:19:43 AM
As per documentation, if Ubuntu has ever been installed on the device at some point, it will have auto-changed the boot ordering. That setting is not kept on-disk, but in the UEFI EEPROM partition. Obviously, the FreeBSD installation does not change boot order by itself.