Bug#989962: debian-bullseye-DI-rc2-amd64-DVD-1.iso image on flash media flash fails to boot on a system that does not support secure boot

[Steve McIntyre]

Control: reassign -1 shim-signed
Control: reassign 989810 shim-signed

Hi David!

On Wed, Jun 16, 2021 at 01:50:51PM -0700, David George Henderson III wrote:
>Package: grub-efi-amd64
>
>The system is a Dell Precision T1200 E3, 16GB of memory,booting off
>flash copy of debian-bullseye-DI-rc2-amd64-DVD-1.iso
>
>Booting the rc2 version flash drive fails to go into the normal menus.
>
>    (note bug 989810 my experiences with rc1 ; it installed as expected but
>the installed system failed to boot)
>
>The delivers the following messages and halts(I had only a few seconds to
>capture the gist):
>
>MoklistRT out of resources
>
>MoklistXRT out of resources
>
>import moc state() -- didn't have time to even get the gist of this error
>message

OK. These messages are from shim, which runs before GRUB on a Secure
Boot setup. Your problem isn't that your system does not support
SB, it's just that it's running out of EFI variable storage
space. Shim is trying to store copies of some of its internal
variables, and that's failing. That's painful. :-(

Google is refusing to find me anything about your system, which is
surprising. Could you give me an idea of its age and the rest of its
specs please?

As a workaround for your installed system: if you're not wanting /
trying to use SB, you could try booting with older bullseye media in
Rescue mode. Get into the booted system and run

  # apt-get remove --purge shim-signed
  # grub-install

and that should let you get in OK after that.

-- 
Steve McIntyre, Cambridge, UK.                                steve at einval.com
  Armed with "Valor": "Centurion" represents quality of Discipline,
  Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
  concord the digital world while feeling safe and proud.