#grub2 — Public Fediverse posts

hep ! besoin de conseils système.

je souhaite installer en dur NetBSD sur mon PC. j'ai quelques interrogations après avoir regardé la doc (mais mon anglais est pas fou fou).

En gros, comment je fais pour l'installer à côter de mon Nux ? Mon disque est partitionné en GPT, j'ai une ESP classique avec un amorçage avec Grub 2, et à côté des partitions BTRFS, une pour chaque Distro et une pour mes données (monté avec FSTAB)(pas de gestion LVM).

Quel procédure et type de partitionnement ?
Est-ce que mon Grub2 peut gérer le boot avec NetBSD ?
Même ESP pour BSD et les nux ? ou je dois chainer les bootloader ?

merci !
#netbsd
#linux
#grub2
#noai
#uefi

@finner If you are using #GRUB2 then why not put Arch and Artix boot loaders and initramfs in their own separate partition?

@Datenpunks @acmelabs Vertraut ihr #ventoy? Ich finde das ja etwas zu BLOB-haltig: https://discuss.privacyguides.net/t/should-ventoy-users-be-concerned-what-remediations-could-users-take/21593 #GRUB2 mit https://github.com/Mexit/MultiOS-USB scheint mir eine vertrauenswürdige Alternative zu sein, wenn auch nicht ganz so flexibel.

RE: https://mastodon.social/@itsfoss/116304976359319734

Uhmm remove LUKS or encrypted boot? That doesn't sound good 🤷🏻‍♀️ #Ubuntu #Linux #grub2

After way too many attempts, I finally got a custom GRUB2 EFI bootloader built with Buildroot showing a splash image at boot on real hardware 🎉

The secret? insmod gfxterm_background + font in the right path.

Simple in theory, painful in practice 🤕

#Buildroot #GRUB2 #EFI #Linux #EmbeddedLinux

At @bawuenet we're in the process of upgrading our #Xen #xcpng hypervisors to #uefi boot. Of course, we automate things and want to be able to reinstall our hypervisors from network boot. Our EFI netboot system is based on #ipxe which means it can only load EFI binaries. But xcp-ng ships the Xen kernel as a multiboot2 based image.
As probably one of the most weird ways to solve this problem, I've decided to chainload #grub2 from iPXE and learned a bit! 🧵

Is anyone using Packer and VMware and Rocky Linux? I'm having an issue with Rocky 10 and the packer boot. Using the example boot command here https://docs.rockylinux.org/10/guides/automation/templates-automation-packer-vsphere/ I end up with a boot box that looks like "xt ip=[blah]" because I think grub changed and <tab> isn't the right key stroke to edit the boot, the 'e' from 'text' is. Thats why I get just 'xt' and what follows. I think I need to then send a control-x to boot. Maybe? Anyone? Anyone? Bueller? My rocky 9 packer build still works great :-) #rockylinux #packer #vmwareESXi #grub2

Our 300th issue has been released! In this issue, we look at viruses in Linux and include some special features celebrating our 25th anniversary! This month's DVD includes #LinuxFromScratch and @debian 13.1. Order your copy today!
https://www.linux-magazine.com/Issues/2025/300?utm_source=mlm
#Linux #virus #OpenSource #GRUB2 #RetroArch #FOSS

The September issue has been released! This month, we show you open source tools you can use to get started with game development. This month's DVD includes CachyOS Desktop Edition and NixOS 25.05. Get your copy today!
https://shop.linuxnewmedia.com/shop/category/linux-magazine-15
#Linux #OpenSource #gaming #FOSS #tools #Debian #kernel #CachyOS #NixOS #GRUB2 #package #AI #bcachefs

Wie startet dein Linux-System und wie konfigurierst du den Boot-Prozess professionell? Genau hier kommt das Boot-Management ins Spiel – ein absolut kritischer Bereich der Linux-Administration, den du als angehender Administrator unbedingt verstehen musst.

Ohne dieses Grundverständnis stehst du bei Boot-Problemen hilflos da.

https://admindocs.de/linux-administration/linux-administration-10-boot-management-systemstart.shtml

#BootManagement #grub2 #linux #sysadmin #initramfs #linuxtutorial

Онлайн миграция системного диска Enterprise Linux на другую СХД

Иногда бывает, что наступает EndOfLife систем хранения данных (СХД) и их нужно выводить из работы, т.к. заканчиваются запчасти. В нашем случае оказалось, что неcколько хостов с Enterprise Linux загружены с этой СХД и необходимо их плавно перевести на другую. Подключить две СХД через SAN к серверам достаточно просто, но как перетащить систему так, чтобы это прошло с минимальным влиянием на бизнес-процессы? В прошлой статье в блоге Bercut я знакомил читателя с утилитой fsarchiver , сегодня мы рассмотрим другой вариант миграции с pvmove и qaucli .

https://habr.com/ru/articles/875824/

#qaucli #pvmove #grub2 #системный_диск #Беркут #Bercut #gdisk #QLogic

Fedora 42 is kinda messing with my mind right now... the GRUB2 entry all become "Fedora Linux 42 (Workstation Edition)" without Kernel version... After some investigation, realized on line 192 in `/usr/lib/kernel/install.d/90-loaderentry.install`, for all kernel entries generated to /boot/loader/entries/, it only uses $PRETTY_NAME from /etc/os-release for $title while GRUB2 loads only the $title... after modifying the title, it finally went normal...

#linux #fedora #grub2 #grub

Security Week 2515: уязвимости в загрузчике GRUB2

На прошлой неделе компания Microsoft отчиталась об обнаружении 11 уязвимостей в загрузчике GRUB2 с открытым исходным кодом. Мотивацией для Microsoft проанализировать опенсорсный проект была потенциально высокая опасность уязвимостей в GRUB: их эксплуатация может привести к компрометации операционной системы и открыть для потенциального атакующего полный доступ к пользовательским данным. Отдельным интересным моментом данного исследовательского проекта стало использование искусственного интеллекта, версии Microsoft Copilot, специально разработанной для устранения прорех в безопасности. В Microsoft прямо говорят, что использования Security Copilot самого по себе недостаточно для эффективного обнаружения уязвимостей, сервис лишь способен ускорить процесс поиска проблем в исходном коде. Помимо ИИ, в проекте также были задействованы традиционные инструменты, такие как статический анализ кода, фаззинг и ручной анализ. Тем не менее была показана эффективность языковой модели для обнаружения потенциально опасных участков кода, которые затем можно проверить и вручную.

https://habr.com/ru/companies/kaspersky/articles/898330/

#grub2 #microsoft #copilot

#Microsoft used its #AI-powered #SecurityCopilot to discover 20 previously unknown vulnerabilities in the #GRUB2, #UBoot, and #Barebox #opensource #bootloaders.
GRUB2 (GRand Unified Bootloader) is the default boot loader for most #Linux distributions, including Ubuntu, while U-Boot and Barebox are commonly used in embedded and #IoT devices.
https://www.bleepingcomputer.com/news/security/microsoft-uses-ai-to-find-flaws-in-grub2-u-boot-barebox-bootloaders/ #ITSec

Microsoft AI Security Copilot Finds Hidden Flaws in GRUB2 and Other Bootloaders

#Cybersecurity #Microsoft #SecurityCopilot #GRUB2 #Uboot #Barebox #AI #OpenSourceSecurity #UEFI #Linux #VulnerabilityResearch

https://winbuzzer.com/2025/04/02/microsoft-ai-security-copilot-finds-hidden-flaws-in-grub2-and-other-bootloaders-xcxwbn/

Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities – Source: www.securityweek.com https://ciso2ciso.com/microsoft-using-ai-to-uncover-critical-bootloader-vulnerabilities-source-www-securityweek-com/ #rssfeedpostgeneratorecho #ArtificialIntelligence #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #bootloader #SecureBoot #Microsoft #FEATURED #Barebox #Copilot #Grub2 #Uboot

Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities https://www.securityweek.com/microsoft-using-ai-to-uncover-critical-bootloader-vulnerabilities/ #ArtificialIntelligence #Vulnerabilities #bootloader #secureboot #Microsoft #Barebox #Copilot #Grub2 #Uboot

Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities https://www.securityweek.com/microsoft-using-ai-to-uncover-critical-bootloader-vulnerabilities/ #ArtificialIntelligence #Vulnerabilities #bootloader #secureboot #Microsoft #Barebox #Copilot #Grub2 #Uboot

The North Koreans and Russians have been busy, Insiders abound, and attacker tradecraft continues to evolve!

Catch all this and more in our latest wrap-up of the day's news:

🗞️ https://opalsec.io/daily-news-update-monday-april-1-2025-australia-melbourne/

There are a few noteworthy stories to get across - here's the TL;DR to get you up to speed:

🕵️ North Korean Infiltration: This is way bigger than many think. DPRK nationals are landing jobs inside global companies, gaining privileged access ("keys to the kingdom" level!). DTEX reports active investigations in 7% of their Fortune Global 2000 clients, and CrowdStrike notes nearly 40% of their NK-related IR cases involved insiders. They move fast post-hire, pivoting to supply chains and installing RATs disguised as onboarding. Watch out for highly anomalous login behaviour (like days-long sessions!). Rigorous remote hiring checks (camera on, resume checks, comms style) are crucial.

🎣 ClickFix Tactics by Lazarus: The infamous North Korean group is evolving its 'Contagious Interview' campaign (now dubbed 'ClickFake' by Sekoia). They're targeting crypto job seekers (shifting focus to non-tech roles too!) with fake website/document errors ('ClickFix'). These prompt users to run PowerShell/curl commands, dropping the 'GolangGhost' backdoor. Watch out for lures impersonating giants like Coinbase or Kraken. Sekoia has shared YARA rules – definitely worth checking out.

💻 WordPress MU-Plugin Abuse: Bad actors are getting stealthy by hiding malicious code in WordPress "Must-Use Plugins" (wp-content/mu-plugins/). These execute automatically on every page load without activation, making them hard to spot. Sucuri is seeing redirects to fake browser updates, webshell backdoors fetching code from GitHub, and JS hijackers replacing content or links. Keep those instances patched, clean up unused plugins/themes, and lock down admin accounts (MFA!).

Check out what else happened in the past 24 hours, and subscribe to get each edition straight to your inbox:
📨 https://opalsec.io/daily-news-update-monday-april-1-2025-australia-melbourne/#/portal/signup

#CyberSecurity #InfoSec #ThreatIntelligence #Hacking #DataBreach #Phishing #Malware #WordPress #NorthKorea #Russia #Ukraine #AI #SecurityCopilot #GRUB2 #Bootloaders #InsiderThreat #DataProtection #CyberAttack #infosecurity #cybersecuritynews #ClickFix