Describe the bug
Unable to enroll secure boot key from ujust pick
- run ujust pick
- Scroll over to the default section
- Select enroll-secure-boot-key
- Enter sudo password
- The command just exits without allowing you to enter a password, thus failing.
What did you expect to happen?
After my sudo password, it should prompt me for my MOK password, where I would enter universalblue
Instead, it just exited with a
error: Recipe `enroll-secure-boot-key` failed on line 35 with exit code 255
Output of rpm-ostree status
EDIT: just in case I tested on a clean bazzite image no difference
ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
Digest: sha256:39bd7b44a5274c577fc128354ff739bef1d207ce4542557a52c1af9da655442e
Version: 42.20250804 (2025-08-04T05:38:00Z)
rpm-ostree status
State: idle
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
Digest: sha256:39bd7b44a5274c577fc128354ff739bef1d207ce4542557a52c1af9da655442e
Version: 42.20250804 (2025-08-04T05:38:00Z)
LayeredPackages: applet-window-buttons cdemu-client cdemu-daemon coolercontrol gamemode kde-cdemu-manager-kf6 konsole kvantum liquidctl plasma-sdk rEFInd rEFInd-tools rmlint rmlint-gui
LocalPackages: rEFInd_GUI-1.4.2-1.fc39.x86_64 sbctl-0.16-2.fc41.x86_64
ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
Digest: sha256:0a9ffd8619c0636dbe8959b777672f514e25e1d4a6cb2016a33f6809fbf46e9a
Version: 42.20250720 (2025-07-20T07:49:01Z)
LayeredPackages: applet-window-buttons cdemu-client cdemu-daemon coolercontrol gamemode kde-cdemu-manager-kf6 konsole kvantum liquidctl plasma-sdk rEFInd rEFInd-tools rmlint rmlint-gui
LocalPackages: rEFInd_GUI-1.4.2-1.fc39.x86_64 sbctl-0.16-2.fc41.x86_64
Hardware
Processors: 6 × AMD Ryzen 5 7600X 6-Core Processor
Memory: 32 GiB of RAM (30.9 GiB usable)
Graphics Processor: AMD Radeon RX 7900 GRE
Manufacturer: ASRock
Product Name: B650M Pro RS WiFi
Extra information or context
Running recipe: enroll-secure-boot-key...
sudo mokutil --timeout -1
echo 'The next line will prompt for a MOK password. Then, input "universalblue"'
The next line will prompt for a MOK password. Then, input "universalblue"
sudo mokutil --import /etc/pki/akmods/certs/akmods-ublue.der
input password:
password should be 1~256 characters
input password:
password should be 1~256 characters
input password:
password should be 1~256 characters
Abort
error: Recipe `enroll-secure-boot-key` failed on line 35 with exit code 255
running the just directly works fine
ujust enroll-secure-boot-key ─╯
sudo mokutil --timeout -1
[sudo] password for zany130:
echo 'The next line will prompt for a MOK password. Then, input "universalblue"'
The next line will prompt for a MOK password. Then, input "universalblue"
sudo mokutil --import /etc/pki/akmods/certs/akmods-ublue.der
input password:
input password again:
echo 'At next reboot, the mokutil UEFI menu UI will be displayed (*QWERTY* keyboard input and navigation).\nThen, select "Enroll MOK", and input "universalblue" as the password'
At next reboot, the mokutil UEFI menu UI will be displayed (*QWERTY* keyboard input and navigation).\nThen, select "Enroll MOK", and input "universalblue" as the password
And then, on reboot, I can enter the MOK password, and secure boot is successfully working on my system.
Describe the bug
Unable to enroll secure boot key from ujust pick
What did you expect to happen?
After my sudo password, it should prompt me for my MOK password, where I would enter
universalblueInstead, it just exited with a
Output of
rpm-ostree statusEDIT: just in case I tested on a clean bazzite image no difference
rpm-ostree status State: idle Deployments: ● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable Digest: sha256:39bd7b44a5274c577fc128354ff739bef1d207ce4542557a52c1af9da655442e Version: 42.20250804 (2025-08-04T05:38:00Z) LayeredPackages: applet-window-buttons cdemu-client cdemu-daemon coolercontrol gamemode kde-cdemu-manager-kf6 konsole kvantum liquidctl plasma-sdk rEFInd rEFInd-tools rmlint rmlint-gui LocalPackages: rEFInd_GUI-1.4.2-1.fc39.x86_64 sbctl-0.16-2.fc41.x86_64 ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable Digest: sha256:0a9ffd8619c0636dbe8959b777672f514e25e1d4a6cb2016a33f6809fbf46e9a Version: 42.20250720 (2025-07-20T07:49:01Z) LayeredPackages: applet-window-buttons cdemu-client cdemu-daemon coolercontrol gamemode kde-cdemu-manager-kf6 konsole kvantum liquidctl plasma-sdk rEFInd rEFInd-tools rmlint rmlint-gui LocalPackages: rEFInd_GUI-1.4.2-1.fc39.x86_64 sbctl-0.16-2.fc41.x86_64Hardware
Processors: 6 × AMD Ryzen 5 7600X 6-Core Processor
Memory: 32 GiB of RAM (30.9 GiB usable)
Graphics Processor: AMD Radeon RX 7900 GRE
Manufacturer: ASRock
Product Name: B650M Pro RS WiFi
Extra information or context
running the just directly works fine
And then, on reboot, I can enter the MOK password, and secure boot is successfully working on my system.