Trustedgrub2 loading and going back to boot

[rohde-schwarz]

Trustedgrub2 loading and going back to boot

[neusdan]

You have to append --no-rs-codes to grub-install as explained in the README. I have to admit that this is easily overlooked. There is already an issue for this here #18

[naynajain]

So, for me after running grub-install command as:

grub-install --directory=/usr/lib/grub2/i386-pc --no-rs-codes /dev/sda2

I have chosen /dev/sda2, because my /boot/grub2 is on /dev/sda2,
it ha overwritten the MBR I guess. So, when I rebooted, it was coming to grub prompt and wasn't recognizing trusted grub.

After that I executed grub-mkconfig -o /boot/grub2/grub.cfg and it has fixed the issue so trustedgrub2 started loading
But then it was looping back infinitely on TrustedGrub2 loading

So, anything wrong I did here ?

[neusdan]

/usr/lib/grub2/i386-pc is the directory where you have installed TrustedGRUB2?

To overwrite the MBR of the disk you have to use /dev/sda instead of /dev/sda2

/boot should be automatically used for the additional TrustedGRUB2 files. To make sure it is used specifiy --root-directory=/boot

[naynajain]

I actually tried both /usr/lib/grub2/i386-pc and /boot/grub2/i386-pc both... but nothing is working..
Now, even after mkconfig, it is not showing TrustedGrub2 loading... it is just going to grub prompt..

is there some entry to check for trusted grub ? I mean where is it installed and configured.

[naynajain]

I specified only --root-directory and not --directory.. I think that correctly installed.
I did specify --no-rs-codes option also
But it is still looping around to Boot ESC menu and TrustedGRUB2 loading.

Is there any workaround so that I can come out of loop and proceed

[neusdan]

i can't really follow in what you have done there. i suggest you install over normal grub2 and first try to install trustedgrub2 to a usb-drive for example.

[chava33]

Try this, it worked for me from USB.

Build and install
apt-get install autogen autoconf automake gcc bison flex
git clone Sirrix-AG/TrustedGRUB2

./autogen.sh

//Myself set INSTALLDIR=boot/trustedGrub2 and target x86_64 but it built for i386 and boots fine
./configure --prefix=/boot/trustedGrub2 --target=i386 -with-platform=pc
make
sudo make install

Install in USB (/dev/sdb)
Bootable USB: With Gparted, USB is formated with Fat32 and Flag is set to boot & lba.
sudo mkdir /mnt/sdb1
sudo mount /dev/sdb1 /mnt/sdb1
sudo /boot/trustedGrub2/sbin/grub-install --directory=/boot/trustedGrub2/lib/grub/i386-pc --root-directory=/mnt/sdb1 --no-rs-codes /dev/sdb
sudo cp /boot/initrd.img-3.16.0-46-generic /mnt/sdb1/boot/
sudo cp /boot/vmlinuz /mnt/sdb1/boot/ sudo umount /mnt/sdb1
Boot from USB (/dev/sdb)

grub> linux16 /boot/vmlinuz root=/dev/sda1
grub> initrd16 boot/initrd.img
grub> boot
 

 On Tuesday, October 20, 2015 11:12 AM, Daniel Neus <[email protected]> wrote:

i can't really follow in what you have done there. i suggest you install over normal grub2 and first try to install trustedgrub2 to a usb-drive for example.—
Reply to this email directly or view it on GitHub.