Questions[secure-boot](ubuntu)

"sudo systemctl start hibernate.target" worked fine with 16.04 on a Acer B117 using legacy boot; Updating to 18.04 forced me to use UEFI and (Acer requirement) secure boot enabled. Suspend still works, but I need hibernate.

Swap partition is active and equals RAM size + 2GB;

GRUB_CMDLINE_LINUX_DEFAULT="quiet splash resume=UUID=myswapuuid"

journalctl -xe revealed failure to access /sys/power/disk

cat /sys/power/disk: [disabled]

cat /sys/power/state: freeze mem

Any suggestions?

Today I wanted to install Kubuntu 18.10 on my computer, but I was surprised that during installation there's information: "Installing third-party drivers requires configuring Secure Boot", which doesn't make much sense to me as third-party drivers are the ones that can't be installed with Secure Boot turned on. I don't need secure boot, but I'm curious, if something changed and now we can use third-party drivers with Secure Boot or is that information wrong?

Here's the image of how this looks in installation window:

I am on Ubuntu 18. I was trying to install amd drivers.

A Configuring Secure Boot screen appeared in terminal and I am stuck on it.

Clicking ok does nothing, pressing enter does nothing.. what do I do?

I upgraded my development edition Dell XPS 13 9360 (i.e. single-boot Ubuntu) from 17.10 to 18.04. During installation, I was asked whether I wanted to create a MOK key to install third-party drivers under secure boot. I said yes and specified a password. After restarting, I was met by the MOK management menu, with four options (iirc):

1. continue boot
2. change secure boot state
3. enroll key from disk
4. enroll hash from disk

I chose 3. However, it didn't accept my password, so all I could do was to proceed with 1.

The upgrade completed without issues, but in order to decide for myself whether this is a problem, I want to better understand the situation.

Specifically, I would like to know:

1. Was enroll key from disk the correct option?
2. Why was my password rejected? Could it be the MOK management menu uses a different keyboard layout from my standard layout in Ubuntu?
3. Does this mean certain third-party drivers were not installed? How do I know which drivers, and how do I get a 'second chance', so to speak?
4. mokutil --sb-state says SecureBoot is enabled, but I seem to get a message saying secure boot is disabled at least sometimes on startup. Perhaps only when I reboot? Is this significant?
5. Do I even need third party drivers on this system? The only components that I feel could work better are the wifi, the touchpad (palm sensitivity when typing) and audio quality with plugged in earphones.

I installed Ubuntu and then decided to install virtualbox via apt install.

Out of the blue, I am asked this:

  ┌───────────────────────┤ Configuring Secure Boot ├────────────────────────┐
  │ A new Machine-Owner key has been generated for this system to use when   │
  │ signing third-party drivers. This key now needs to be enrolled in your   │
  │ firmware, which will be done at the next reboot.                         │
  │                                                                          │
  │ If Secure Boot validation was previously disabled on your system,        │
  │ validation will also be re-enabled as part of this key enrollment        │
  │ process.                                                                 │
  │                                                                          │
  │ Enroll a new Machine-Owner Key?                                          │
  │                                                                          │
  │                    <Yes>                       <No>                      │
  │                                                                          │
  └──────────────────────────────────────────────────────────────────────────┘ 

I have no idea what that means, but it does not sound like something I would have a strong opinion about.

What is the "safe" choice?

The default choice is "No", so I guess it is what most users choose?

Update: I just read all of https://wiki.ubuntu.com/UEFI/SecureBoot but I am still not sure. I vaguely remember a similar step when I installed the OS, so I guess I should have a key already, and creating a new one might cause problems.

Update 2: I just got this prompt again, this time with an intro message saying "UEFI Secure Boot requires additional configuration to work with third-party drivers." I clicked "Next" just to see, but then pressing "Back" unexpectedly made the dialog disappear.