Need to fix boot process broken by kernel update. Data is safe.

67 views
Skip to first unread message

Ranjeet Shetye

unread,
Feb 9, 2021, 10:06:22 PM2/9/21
to qubes...@googlegroups.com
Hi,

Is there a standard HOWTO I can follow to fix the boot process (to go from a grub / xen.cfg that fails to LUKS decrypt and load unencrypted rootfs)

I am reasonably knowledgeable about Linux. Gaps exist in my knowledge regarding BIOS and UEFI boot processes.

Unfortunately the grub update for the kernel upgrade seems to have messed up the boot process. How do I figure out if it's installed for BIOS or UEFI mode ?

My data is safe and LUKS encrypted . I can use a live USB to decrypt it, access it and I also have made 2 backup copies.

So with nothing to lose I tried to fix the boot manually from a live USB including creating /etc/default/grub but situation is no better. 

Between BIOS / (UEFI) / grub2 / xen / vmlinuz / LUKS / LVM2 , I am lost where the fix might be. Might be grub flags, grub modules, grub defaults, xen cfg, EFI manager etc. Hence my question.

Thanks,
Ranjeet

donoban

unread,
Feb 10, 2021, 6:47:47 AM2/10/21
to qubes...@googlegroups.com
What is exactly your problem? Does it boot, you see xen/linux messages
but fail before asking for your luks passphrase?

Maybe it is just a linux kernel problem and you can boot an older
version editing xen.cfg (if you are using UEFI boot without grub). Do
you have installed kernel-latest versions?

OpenPGP_signature

Bernhard

unread,
Feb 10, 2021, 7:44:22 AM2/10/21
to qubes...@googlegroups.com

>> Is there a standard HOWTO I can follow to fix the boot process (to go
>> from a grub / xen.cfg that fails to LUKS decrypt and load unencrypted
>> rootfs)

Not that I know. Would be helpful, indeed.

>> Unfortunately the grub update for the kernel upgrade seems to have
>> messed up the boot process. How do I figure out if it's installed for
>> BIOS or UEFI mode ?

That is in your BIOS. If it is "legacy" it means old-school MBR, if not
it should be written UEFI somewhere.
>> My data is safe and LUKS encrypted . I can use a live USB to decrypt it,
>> access it and I also have made 2 backup copies.
good.

>> So with nothing to lose I tried to fix the boot manually from a live USB
>> including creating /etc/default/grub but situation is no better.

I had similar problems recently. If it is UEFI (and I guess so),
efibootmgr is your friend (not preinstalled on debian-live, but you grab
it easily via apt-get). Also look the "UEFI troubleshooting" qubes
webpage! You can re-do the qubes boot entry with efibootmgr (please read
the man page, syntax is not memorisable for me). Good luck, Bernhard



Jinoh Kang

unread,
Feb 10, 2021, 9:21:12 AM2/10/21
to Ranjeet Shetye, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Also note that Qubes R4.0 on UEFI does not boot via GRUB -- it boots directly via \EFI\qubes\xen.efi.

- --
Sincerely,
Jinoh Kang
-----BEGIN PGP SIGNATURE-----
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=pSYS
-----END PGP SIGNATURE-----

Ranjeet Shetye

unread,
Feb 10, 2021, 1:51:56 PM2/10/21
to Jinoh Kang, qubes...@googlegroups.com

Hi,

I got my system up and running.

It was a problem with the efi boot details. I had installed the latest kernel (not manually) and that install process somehow messed up the efi boot as it existed. After boot was broken, the console would show what it was going to boot but the xen never loaded. Now it does.

Thank you donoban, Bernhard, and Jinoh for the right pointers.

I have made a list of steps that helped me gauge the situation. I will post it within a few hours.

Regards,
Ranjeet

Ranjeet Shetye

unread,
Mar 6, 2021, 11:17:26 PM3/6/21
to qubes-users

Hi,

Following up on my previous post: I've documented the Qubes boot process to the best of my knowledge in QUBES-BOOTUP.svg @ https://github.com/rshetye/good-karma/

It took some time to document and organize everything.

Thanks,
Ranjeet
Reply all
Reply to author
Forward
0 new messages