[CentOS-devel] Subject=Re: secure boot comments

[Fabian Arrotin]

On 26/06/14 20:26, Keivan Motavalli wrote:
> I downloaded and burned livecd-centos-7-live-gnome-201406261459.iso
> (checking its hashsum).
> 
> It does boot flawlessly on a lenovo thinkpad T430-2349H3G using uefi
> only and secureboot enabled.
> 
> modsign-uefi throws "Couldn't parse DBX signatures: -74", but the boot
> process continues.
> 
> The live image, however, is not usable, neither textually nor graphically.
> 
> The laptop comes with an integrated 3G modem, "Ericsson HSPA+ WWAN
> Minicard (H5321gw)". modem-manager.service fails to start, and
> subsequently also "systemd-logind.service" repetitively fails to
> starts, leaving the system in an unusable state, without any working
> tty and/or display manager.
> 
> IMHO, systemd-logind tries to start getty on one of the 3g modem
> serial interfaces, probably not recognizing it as one, thus failing.
> 
> disabling the integrated modem and wlan adapter via a physical switch
> is a workaround to the issue. This seems to be a fedora 19-20 bug gone
> unfixed into RHEL7.
> _______________________________________________
> CentOS-devel mailing list
> CentOS-devel at centos.org
> http://lists.centos.org/mailman/listinfo/centos-devel
> Received: from lithium.arrfab.net (unknown [172.19.5.1])  by
>  radium.arrfab.net (Postfix) with ESMTP id 27E5449B6CA for
>  <fabian.arrotin at arrfab.net>; Thu, 26 Jun 2014 20:26:31 +0200
> Received: from mail.centos.org (mail.centos.org [72.26.200.202])  by
>  lithium.arrfab.net (8.13.8/8.13.8) with ESMTP id s5QIQSTq008206 for
>  <fabian.arrotin at arrfab.net>; Thu, 26 Jun 2014 20:26:28 +0200
> Received: from mail.centos.org (voxeldev.centos.org [127.0.0.1])  by
>  mail.centos.org (Postfix) with ESMTP id E1E7F817F70; Thu, 26 Jun 2014
>  18:26:26 +0000
> Received: from mail-vc0-f178.google.com (mail-vc0-f178.google.com
>  [209.85.220.178])  by mail.centos.org (Postfix) with ESMTP id 11757817F68
>  for <centos-devel at centos.org>; Thu, 26 Jun 2014 18:26:24 +0000
> Received: by mail-vc0-f178.google.com with SMTP id ij19so3957479vcb.23 for
>  <centos-devel at centos.org>; Thu, 26 Jun 2014 11:26:25 -0700
> Received: by 10.220.50.81 with HTTP; Thu, 26 Jun 2014 11:26:25 -0700
> Subject: [CentOS-devel] Subject=:  secure boot comments
> From: =indows-1252?Q?Keivan_Motavalli?= <motavalli.keivan at gmail.com>
> To: =indows-1252?Q?To=?= <538CF11A.9020707 at karan.org>, 
>  =indows-1252?Q?centos-devel at centos.org?= <centos-devel at centos.org>
> Date: Thu, 26 Jun 2014 18:26:25 +0000
> Mime-Version: 1.0
> Content-Type: text/plain; charset=ndows-1252
> Content-Transfer-Encoding: quoted-printable
> X-Mailer: Zarafa 6.40.7-26119
> Sender: =indows-1252?Q?motavalli.keivan at gmail.com?  <centos-devel-bounces at centos.org>
> Reply-To: =indows-1252?Q?The_CentOS_developers_mailing_list.?  <centos-devel at centos.org>
> Precedence: list
> List-Id: "The CentOS developers mailing list." <centos-devel.centos.org>
> List-Unsubscribe: <http://lists.centos.org/mailman/listinfo/centos-devel>,
> 	<mailto:centos-devel-request at centos.org?subject=subscribe>
> List-Archive: <http://lists.centos.org/pipermail/centos-devel>
> List-Post: <mailto:centos-devel at centos.org>
> List-Help: <mailto:centos-devel-request at centos.org?subject=lp>
> List-Subscribe: <http://lists.centos.org/mailman/listinfo/centos-devel>,
> 	<mailto:centos-devel-request at centos.org?subject=bscribe>
> X-Spam-Status: No
> X-Beenthere: centos-devel at centos.org
> X-Mailman-Version: 2.1.9
> X-Original-To: centos-devel at centos.org
> X-Received: by 10.220.94.135 with SMTP id z7mr3232295vcm.46.1403807185388;
> 	Thu, 26 Jun 2014 11:26:25 -0700 (PDT)
> X-Arrfab-Bluewall-Mailscanner-Information: Please contact the ISP for more information
> X-Arrfab-Bluewall-Mailscanner-Id: s5QIQSTq008206
> X-Arrfab-Bluewall-Mailscanner: Found to be clean
> X-Arrfab-Bluewall-Mailscanner-From: centos-devel-bounces at centos.org
> Message-Id: 
>  <CACvd5vKnp3zo_qHJGsv9dc3ErjULabwk=k+8xH6MULGqe7aQ at mail.gmail.com>
> 
> I downloaded and burned livecd-centos-7-live-gnome-201406261459.iso
> (checking its hashsum).
> 
> It does boot flawlessly on a lenovo thinkpad T430-2349H3G using uefi
> only and secureboot enabled.
> 
> modsign-uefi throws "Couldn't parse DBX signatures: -74", but the boot
> process continues.
> 
> The live image, however, is not usable, neither textually nor graphically.
> 
> The laptop comes with an integrated 3G modem, "Ericsson HSPA+ WWAN
> Minicard (H5321gw)". modem-manager.service fails to start, and
> subsequently also "systemd-logind.service" repetitively fails to
> starts, leaving the system in an unusable state, without any working
> tty and/or display manager.
> 
> IMHO, systemd-logind tries to start getty on one of the 3g modem
> serial interfaces, probably not recognizing it as one, thus failing.
> 
> disabling the integrated modem and wlan adapter via a physical switch
> is a workaround to the issue. This seems to be a fedora 19-20 bug gone
> unfixed into RHEL7.

Thanks for the report, and also for the "workaround". I found quite a
bunch of issues like that one being reported on bugzilla for Fedora too.
Maybe worth mentioning on the wiki/annoucement if we have no real fix for GA

Cheers,


-- 
Fabian Arrotin
gpg key: 56BEC54E | twitter: @arrfab