What is an SBAT and why does everyone suddenly care
mjg59.dreamwidth.org
What is an SBAT and why does everyone suddenly care
1–10 of 276 posts
Re: What is an SBAT and why does everyone suddenly care
#2is it possible to update grub from Windows? or is it enough to disable secure boot, boot Linux, upgrade, reenable?
Re: What is an SBAT and why does everyone suddenly care
#3I really hate the error message from shim (or SB in general) when a security check fails. At tell me what exactly failed and what I could do to fix it.
Re: What is an SBAT and why does everyone suddenly care
#4is it possible to update grub from Windows? or is it enough to disable secure boot, boot Linux, upgrade, reenable?
I wouldn't try update grub from Windows, but the second strategy would work.
Re: What is an SBAT and why does everyone suddenly care
#5This sort of thing is exactly why I have automatic updates disabled on my Windows partition. I've been burned so many times by bad Windows updates breaking stuff. My favourite is when stuff breaks during the "configuring updates" stage after a reboot, leaving Windows in a boot loop with no error codes or anything to help you figure it out. And of course the documentation from MS is utter garbage. Most of the time the only solution I found was to reinstall Windows.
Now I always google around a bit before applying any fresh Windows updates to see of there's any breakage reported.
Re: What is an SBAT and why does everyone suddenly care
#6is it possible to update grub from Windows? or is it enough to disable secure boot, boot Linux, upgrade, reenable?
I don't see why you couldn't update grub from Windows, its just EFI binary in ESP after all.
Re: What is an SBAT and why does everyone suddenly care
#7I really hate the error message from shim (or SB in general) when a security check fails. At tell me what exactly failed and what I could do to fix it.
Seems to be a general trend in a lot of software nowadays. Vague error messages telling you "Something went wrong" with no additional details.
Re: What is an SBAT and why does everyone suddenly care
#8is it possible to update grub from Windows? or is it enough to disable secure boot, boot Linux, upgrade, reenable?
I don't see why you couldn't update grub from Windows, its just EFI binary in ESP after all.
Distro grub is signed by the distro rather than Microsoft, so coordinating that would be extremely difficult
Re: What is an SBAT and why does everyone suddenly care
#9Although MS' stance to block old vulnerable grub installs seems reasonable here, I've come to run Windows only for games and a single piece of legacy software (as a backup for my aging x86 Mac) without net access at all. The moment you allow Win updates, everything is up to chances. MS moving around registry keys and other shenanigans to force "telemetry" (aka ads and behavioral data scanning for ML) onto users, even on Windows Pro, should be telling enough. Needless to say, I'm running Win 10.
Re: What is an SBAT and why does everyone suddenly care
#10This sort of thing is exactly why I have automatic updates disabled on my Windows partition. I've been burned so many times by bad Windows updates breaking stuff. My favourite is when stuff breaks during the "configuring updates" stage after a reboot, leaving Windows in a boot loop with no error codes or anything to help you figure it out. And of course the documentation from MS is utter garbage. Most of the time the…
The last time I had to manages windows I used Unattended to wipe and re-install to a base level. I found that diagnosing and troubleshooting was not worth the effort.