No boot after dom0 security repo update on may 15

[pon...@keemail.me]

Hi all.

 

My machine directly boots into BIOS screen if my Asus Zenbook UX303 after updating Qubes 4.0 dom0, security repo enabled. I don't remember the error messages (s.th. with keys).

So I boot from rescue USB Stick. Have to choose (3), going directly to shell. —

And here I'm stuck, since many, many hours. No really helpful, _accurate_ instructions for medium talented users found. ;)

How to replace dom0? Or restore boot files?

I've got a pretty fresh complete backup on external USB drive, but don't want to install everything anew.

Thanks for help!

[pon...@keemail.me]

 I think I'm on the right way.

  1) Booting from USB installer/rescue stick

  2) 'Rescue' mode

  3) Number (1), waiting _patiently_ for decryption

  4) Following

  https://www.qubes-os.org/doc/uefi-troubleshooting,

  section 'Installation finished but “Qubes” boot

  option is missing and xen.cfg is empty'

  Let's see ...

[pon...@keemail.me]

 Yay!

  Deleted new kernel entries, changed default in

  xen.cfg to older kernel.

  Uff.

[awokd]

On Wed, May 16, 2018 1:51 pm, pon...@keemail.me wrote:
> Hi all. My machine directly boots into BIOS screen if my Asus Zenbook
> UX303 after updating Qubes 4.0 dom0, security repo enabled. I don't
> remember the error messages (s.th. with keys).
> So I boot from rescue USB Stick. Have to choose (3), going directly to
> shell. —
> And here I'm stuck, since many, many hours. No really helpful, _accurate_
> instructions for medium talented users found. ;)

> How to replace dom0? Or restore boot files?I've got a pretty fresh

> complete backup on external USB drive, but don't want to install
> everything anew.

Reinstall/restore might be fastest. If you want to try to fix it, search
this mailing list for "efibootmgr" assuming you have UEFI boot. Sounds
like something got corrupted. Reinstall GRUB if not using UEFI.

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

If that's UEFI, verify content of /boot/efi/EFI/qubes/xen.cfg (/boot/efi
is a separate partition, the first one on default install). Verify that
default= entry points at existing section and it is the newest one. Also
verify if files referenced there looks sane (if you've run out of disk
space, those might be smaller than the rest). By editing this file you
can also boot earlier kernel.

Here is example xen.cfg file:
https://www.qubes-os.org/doc/uefi-troubleshooting/#installation-finished-but-qubes-boot-option-is-missing-and-xencfg-is-empty

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlr/GFoACgkQ24/THMrX
1yyCfQf+Ltm7cIZmPvqdDKZXHdsuNOWPVw09lAZ7p/BMEf5WVd4iIkb/5muuRn7C
YmNjttaiDDcNd5u6teNCs3xHMyC3sxcjaqNwyyWAK8eZ2RACo1rYryCPZiirNbGp
Tzf5fkmrQZHvEN7n6EAolx6B+G3GBiiAEDM+TmDnqEMDXsML8HwGh0T7Fh8H+IBe
YqsigU7zqQGC/kWeUfbLgdaBbe+jUUioJQWBEb5xvmbzdn7kfQuzGmTBqqqyTIkY
+iDZbNl9UaD1SqHLzfqtjeFKo9l21FV1HVm6NG90AwPbTWIGHLppKEMICEKEmUcM
EerCf238hhUi6+gkOLeLOTRIG5yaOQ==
=eBH7
-----END PGP SIGNATURE-----