aboutsummaryrefslogtreecommitdiff
path: root/README.org
diff options
context:
space:
mode:
Diffstat (limited to 'README.org')
-rw-r--r--README.org9
1 files changed, 9 insertions, 0 deletions
diff --git a/README.org b/README.org
index 0c3dabf..de178b9 100644
--- a/README.org
+++ b/README.org
@@ -494,6 +494,15 @@ The ISO includes DKMS-built ZFS modules. If modules fail to load:
** Boot Fails After Installation
+- Check Secure Boot before assuming the boot entry is gone. A firmware update
+ can re-enable it silently, and the unsigned ZFSBootMenu or GRUB loader is
+ then rejected with "Default Boot Device Missing" / "no bootable drive"
+ rather than a security-violation message. If you boot the ISO through
+ Ventoy, the tell is shim's MOK screen. A plain USB write of the ISO will not
+ boot at all under Secure Boot. Fix: disable Enforce Secure Boot in firmware
+ setup (on a Framework laptop: F2, Security, Secure Boot) and save. No
+ ~efibootmgr~ changes are needed.
+
*** ZFS
- Check ZFSBootMenu appears (if not, check EFI boot order with ~efibootmgr~)
- Verify pool can import: boot ISO, ~zpool import -f zroot~