On Fri, Jan 30, 2026 at 01:01:16PM +0100, Nick via Dng wrote:
> On 1/30/26 12:09 PM, Joel Roth via Dng wrote:
> > Aloha list,
> >
> > Trying to get linux to boot on my new-used T14. This model
> > has secure boot, came from Newegg with Windows installed.
> >
> > It took me trying a few different USB ISO images to succeed.
> > I expected it to boot promiscuously with secure boot turned
> > off in the BIOS. Not. I expected debian-based ISOs with signed
> > kernels to boot even with secure boot on. Not.
> >
> > Now I am running an antix ISO image with secure boot off.
> > With Windows still installed, the USB image will only boot
> > by pressing F12 during startup and choosing the USB boot
> > device. (Perhaps enabling the boot lock BIOS setting will
> > force the machine to boot the USB HDD set as first boot
> > device. But I won't risk falling through a one-way
> > trapdoor.)
> >
> Afaik Ubuntu can boot with secure boot on. (But I always disable secure boot
> so not tested.)
>
> You can safely set USB as first boot device and HDD/SSD as second. When a
> USB device is unavailable it will choose automatically your HDD/SDD. Only
> disadvantage is it will boot from any bootable USB device present.

Thanks. I remember reading that Ubuntu is signed. However I
also encounter documentation that debian kernels since
Buster have been signed. Go figure.

I found no documentation for boot order lock, although it
makes sense that it probably means "actually follow the specified
boot order, even if Windows is sitting on another
partition."

cheers



--
Joel Roth