New Laptops that allow one to install Linux ie Allowed to disable Secure Boot and UEFI

robertdaleweir · 09-07-2016, 08:09 PM

I need to purchase a few Laptops which I can install, using the old (or new) BIOs approach. I understand that some Manufacturers have locked down their Laptops to only boot in Secure Boot and using the UEFI Partition on the Hard Drive (ie Win10 only).
I want to, to the extent possible, avoid issues with these two items by hopefully turning OFF the Secure Boot and UEFI install.
Can anyone assist me in identifying Manufacturers which will allow an OS to boot under the BIOS approach and avoid UEFI (and Win 10)!

rokytnji · 09-07-2016, 08:14 PM

In my bios. I have Legacy and Secure Boot both turned on. On this

Code:

$ inxi -Fxz
System:    Host: biker Kernel: 4.6.2-antix.1-686-smp-pae i686 (32 bit gcc: 4.9.3)
           Desktop: IceWM 1.3.8
           Distro: antiX-15-V_386-full Killah P 30 June 2015
Machine:   System: LENOVO (portable) product: 2347DS2 v: ThinkPad T430
           Mobo: LENOVO model: 2347DS2
           Bios: LENOVO v: G1ET41WW (1.16 ) date: 05/25/2012
Battery    BAT0: charge: 36.1 Wh 99.9% condition: 36.1/56.2 Wh (64%)
           model: SANYO 45N1001 status: Full
CPU:       Dual core Intel Core i5-3320M (-HT-MCP-) cache: 3072 KB
           flags: (lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx) bmips: 10376
           clock speeds: max: 3300 MHz 1: 1200 MHz 2: 1200 MHz 3: 1295 MHz
           4: 1204 MHz
Graphics:  Card: Intel 3rd Gen Core processor Graphics Controller
           bus-ID: 00:02.0
           Display Server: X.Org 1.16.4 drivers: intel (unloaded: fbdev,vesa)
           Resolution: 1600x900@60.01hz
           GLX Renderer: Mesa DRI Intel Ivybridge Mobile x86/MMX/SSE2
           GLX Version: 3.0 Mesa 10.3.2 Direct Rendering: Yes
Audio:     Card Intel 7 Series/C210 Series Family High Definition Audio Controller
           driver: snd_hda_intel bus-ID: 00:1b.0
           Sound: ALSA v: k4.6.2-antix.1-686-smp-pae
Network:   Card-1: Intel 82579LM Gigabit Network Connection
           driver: e1000e v: 3.2.6-k port: 4080 bus-ID: 00:19.0
           IF: eth2 state: down mac: <filter>
           Card-2: Intel Centrino Advanced-N 6205 [Taylor Peak]
           driver: iwlwifi bus-ID: 03:00.0
           IF: wlan0 state: up mac: <filter>
Drives:    HDD Total Size: 320.1GB (11.3% used)
           ID-1: /dev/sda model: HGST_HTS545032A7 size: 320.1GB
Partition: ID-1: / size: 7.6G used: 4.8G (66%) fs: ext4 dev: /dev/sda1
           ID-2: /home size: 68G used: 16G (25%) fs: ext4 dev: /dev/sda2
           ID-3: swap-1 size: 4.19GB used: 0.00GB (0%) fs: swap dev: /dev/sda3
Sensors:   System Temperatures: cpu: 44.0C mobo: N/A
           Fan Speeds (in rpm): cpu: 3227
Info:      Processes: 176 Uptime: 3:23 Memory: 475.0/15932.1MB
           Init: SysVinit runlevel: 5 Gcc sys: 4.9.2
           Client: Shell (bash 4.3.301) inxi: 2.3.0

The Windows 10 Enterprise hard drive went into the laptop bag in case it is ever needed.
This hard drive came out of a blown/broken IBM Z60M and booted right on up.

Timothy Miller · 09-07-2016, 08:43 PM

Quote:

Originally Posted by robertdaleweir

I need to purchase a few Laptops which I can install, using the old (or new) BIOs approach. I understand that some Manufacturers have locked down their Laptops to only boot in Secure Boot and using the UEFI Partition on the Hard Drive (ie Win10 only).
I want to, to the extent possible, avoid issues with these two items by hopefully turning OFF the Secure Boot and UEFI install.
Can anyone assist me in identifying Manufacturers which will allow an OS to boot under the BIOS approach and avoid UEFI (and Win 10)!

Don't know of any as far as still allowing legacy (since I will only use UEFI and refuse to touch legacy mode), but so far Dell's Latitude line allows for turning off secure boot. As does the HP AN013NR that I just recently bought.

robertdaleweir · 09-07-2016, 09:46 PM

Quote:

Originally Posted by rokytnji

In my bios. I have Legacy and Secure Boot both turned on. On this

Code:

$ inxi -Fxz
System:    Host: biker Kernel: 4.6.2-antix.1-686-smp-pae i686 (32 bit gcc: 4.9.3)
           Desktop: IceWM 1.3.8
           Distro: antiX-15-V_386-full Killah P 30 June 2015
Machine:   System: LENOVO (portable) product: 2347DS2 v: ThinkPad T430
           Mobo: LENOVO model: 2347DS2
           Bios: LENOVO v: G1ET41WW (1.16 ) date: 05/25/2012
Battery    BAT0: charge: 36.1 Wh 99.9% condition: 36.1/56.2 Wh (64%)
           model: SANYO 45N1001 status: Full
CPU:       Dual core Intel Core i5-3320M (-HT-MCP-) cache: 3072 KB
           flags: (lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx) bmips: 10376
           clock speeds: max: 3300 MHz 1: 1200 MHz 2: 1200 MHz 3: 1295 MHz
           4: 1204 MHz
Graphics:  Card: Intel 3rd Gen Core processor Graphics Controller
           bus-ID: 00:02.0
           Display Server: X.Org 1.16.4 drivers: intel (unloaded: fbdev,vesa)
           Resolution: 1600x900@60.01hz
           GLX Renderer: Mesa DRI Intel Ivybridge Mobile x86/MMX/SSE2
           GLX Version: 3.0 Mesa 10.3.2 Direct Rendering: Yes
Audio:     Card Intel 7 Series/C210 Series Family High Definition Audio Controller
           driver: snd_hda_intel bus-ID: 00:1b.0
           Sound: ALSA v: k4.6.2-antix.1-686-smp-pae
Network:   Card-1: Intel 82579LM Gigabit Network Connection
           driver: e1000e v: 3.2.6-k port: 4080 bus-ID: 00:19.0
           IF: eth2 state: down mac: <filter>
           Card-2: Intel Centrino Advanced-N 6205 [Taylor Peak]
           driver: iwlwifi bus-ID: 03:00.0
           IF: wlan0 state: up mac: <filter>
Drives:    HDD Total Size: 320.1GB (11.3% used)
           ID-1: /dev/sda model: HGST_HTS545032A7 size: 320.1GB
Partition: ID-1: / size: 7.6G used: 4.8G (66%) fs: ext4 dev: /dev/sda1
           ID-2: /home size: 68G used: 16G (25%) fs: ext4 dev: /dev/sda2
           ID-3: swap-1 size: 4.19GB used: 0.00GB (0%) fs: swap dev: /dev/sda3
Sensors:   System Temperatures: cpu: 44.0C mobo: N/A
           Fan Speeds (in rpm): cpu: 3227
Info:      Processes: 176 Uptime: 3:23 Memory: 475.0/15932.1MB
           Init: SysVinit runlevel: 5 Gcc sys: 4.9.2
           Client: Shell (bash 4.3.301) inxi: 2.3.0

The Windows 10 Enterprise hard drive went into the laptop bag in case it is ever needed.
This hard drive came out of a blown/broken IBM Z60M and booted right on up.

Hi rokytnji
Thank you. Did you have an EFI partition on the replacement Drive? I am confused about removing an existing Hard Drive with an EFI partition and then replacing it with another, that does not have one. If the Firmware is locked down (cannot boot except with Windows) can one use a new drive with Linux easily?

robertdaleweir · 09-07-2016, 09:50 PM

Quote:

Originally Posted by Timothy Miller

Don't know of any as far as still allowing legacy (since I will only use UEFI and refuse to touch legacy mode), but so far Dell's Latitude line allows for turning off secure boot. As does the HP AN013NR that I just recently bought.

Hi Timothy Miller
Did you install Fedora using UEFI and if so do you know where I can find a good 'howto' so that I can learn what is involved? Thanks for your reply...

Timothy Miller · 09-07-2016, 10:14 PM

Quote:

Originally Posted by robertdaleweir

Hi Timothy Miller
Did you install Fedora using UEFI and if so do you know where I can find a good 'howto' so that I can learn what is involved? Thanks for your reply...

Yes, I've installed all my OS's via UEFI. If your machine is "pure" UEFI (no legacy support), there's not much to learn. It'll boot in UEFI mode, and the only thing you need to make sure of is that there's a ~200 MB fat32 partition set as the EFI partition as the first partition on the drive. The problem almost always occurs that I've seen when UEFI is enabled, as well as legacy roms enabled, because then some OS's will boot in legacy mode, and attempt to install the bootloader in MBR mode, which isn't actually bootable in UEFI mode.

rokytnji · 09-07-2016, 11:27 PM

No efi on a drive off a ancient Pentium M IBM z60M.

Code:

$ sudo parted -l
Model: ATA HGST HTS545032A7 (scsi)
Disk /dev/sda: 320GB
Sector size (logical/physical): 512B/4096B
Partition Table: msdos
Disk Flags: 

Number  Start   End     Size    Type      File system     Flags
 1      1049kB  8390MB  8389MB  primary   ext4
 2      8390MB  81.8GB  73.4GB  primary   ext4
 3      81.8GB  86.0GB  4194MB  primary   linux-swap(v1)
 4      86.0GB  320GB   234GB   extended
 6      86.0GB  191GB   105GB   logical   ext4
 5      191GB   320GB   129GB   logical   ext4

Code:

$ sudo hdparm -I /dev/sda

/dev/sda:

ATA device, with non-removable media
	Model Number:       HGST HTS545032A7E380                    
	Serial Number:      TM8412ZJ15LVER
	Firmware Revision:  GGBOAC90
	Transport:          Serial, ATA8-AST, SATA 1.0a, SATA II Extensions, SATA Rev 2.5, SATA Rev 2.6; Revision: ATA8-AST T13 Project D1697 Revision 0b
Standards:
	Used: unknown (minor revision code 0x0028) 
	Supported: 8 7 6 5 
	Likely used: 8
Configuration:
	Logical		max	current
	cylinders	16383	65535
	heads		16	1
	sectors/track	63	63
	--
	CHS current addressable sectors:    4128705
	LBA    user addressable sectors:  268435455
	LBA48  user addressable sectors:  625142448
	Logical  Sector size:                   512 bytes
	Physical Sector size:                  4096 bytes
	Logical Sector-0 offset:                  0 bytes
	device size with M = 1024*1024:      305245 MBytes
	device size with M = 1000*1000:      320072 MBytes (320 GB)
	cache/buffer size  = 8192 KBytes (type=DualPortCache)
	Form Factor: 2.5 inch
	Nominal Media Rotation Rate: 5400
Capabilities:
	LBA, IORDY(can be disabled)
	Queue depth: 32
	Standby timer values: spec'd by Standard, no device specific minimum
	R/W multiple sector transfer: Max = 16	Current = 16
	Advanced power management level: 128
	DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6 
	     Cycle time: min=120ns recommended=120ns
	PIO: pio0 pio1 pio2 pio3 pio4 
	     Cycle time: no flow control=120ns  IORDY flow control=120ns
Commands/features:
	Enabled	Supported:
	   *	SMART feature set
	    	Security Mode feature set
	   *	Power Management feature set
	   *	Write cache
	   *	Look-ahead
	   *	Host Protected Area feature set
	   *	WRITE_BUFFER command
	   *	READ_BUFFER command
	   *	NOP cmd
	   *	DOWNLOAD_MICROCODE
	   *	Advanced Power Management feature set
	    	Power-Up In Standby feature set
	   *	SET_FEATURES required to spinup after power up
	    	SET_MAX security extension
	   *	48-bit Address feature set
	   *	Device Configuration Overlay feature set
	   *	Mandatory FLUSH_CACHE
	   *	FLUSH_CACHE_EXT
	   *	SMART error logging
	   *	SMART self-test
	   *	General Purpose Logging feature set
	   *	WRITE_{DMA|MULTIPLE}_FUA_EXT
	   *	64-bit World wide name
	   *	IDLE_IMMEDIATE with UNLOAD
	   *	WRITE_UNCORRECTABLE_EXT command
	   *	{READ,WRITE}_DMA_EXT_GPL commands
	   *	Segmented DOWNLOAD_MICROCODE
	   *	Gen1 signaling speed (1.5Gb/s)
	   *	Gen2 signaling speed (3.0Gb/s)
	   *	Native Command Queueing (NCQ)
	   *	Host-initiated interface power management
	   *	Phy event counters
	   *	NCQ priority information
	    	Non-Zero buffer offsets in DMA Setup FIS
	   *	DMA Setup Auto-Activate optimization
	    	Device-initiated interface power management
	    	In-order data delivery
	   *	Software settings preservation
	   *	SMART Command Transport (SCT) feature set
	   *	SCT Write Same (AC2)
	   *	SCT Error Recovery Control (AC3)
	   *	SCT Features Control (AC4)
	   *	SCT Data Tables (AC5)
Security: 
	Master password revision code = 65534
		supported
	not	enabled
	not	locked
		frozen
	not	expired: security count
		supported: enhanced erase
	90min for SECURITY ERASE UNIT. 92min for ENHANCED SECURITY ERASE UNIT. 
Logical Unit WWN Device Identifier: 5000cca71fd0a421
	NAA		: 5
	IEEE OUI	: 000cca
	Unique ID	: 71fd0a421
Checksum: correct

No firmware worries either. Just drop in and go.
But I am talking my IBM T430. I am not sure what my Dell E4310 has as I am not booted up in it and
it is a older unit anyways than this IBM laptop.