Skip to content

enroll-secure-boot-key just does not successfully run from picker #3030

Description

@zany130

Describe the bug

Unable to enroll secure boot key from ujust pick

  1. run ujust pick
  2. Scroll over to the default section
  3. Select enroll-secure-boot-key
  4. Enter sudo password
  5. The command just exits without allowing you to enter a password, thus failing.

What did you expect to happen?

After my sudo password, it should prompt me for my MOK password, where I would enter universalblue

Instead, it just exited with a

error: Recipe `enroll-secure-boot-key` failed on line 35 with exit code 255

Output of rpm-ostree status

EDIT: just in case I tested on a clean bazzite image no difference

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:39bd7b44a5274c577fc128354ff739bef1d207ce4542557a52c1af9da655442e
                  Version: 42.20250804 (2025-08-04T05:38:00Z)
rpm-ostree status
State: idle
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:39bd7b44a5274c577fc128354ff739bef1d207ce4542557a52c1af9da655442e
                  Version: 42.20250804 (2025-08-04T05:38:00Z)
          LayeredPackages: applet-window-buttons cdemu-client cdemu-daemon coolercontrol gamemode kde-cdemu-manager-kf6 konsole kvantum liquidctl plasma-sdk rEFInd rEFInd-tools rmlint rmlint-gui
            LocalPackages: rEFInd_GUI-1.4.2-1.fc39.x86_64 sbctl-0.16-2.fc41.x86_64

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:0a9ffd8619c0636dbe8959b777672f514e25e1d4a6cb2016a33f6809fbf46e9a
                  Version: 42.20250720 (2025-07-20T07:49:01Z)
          LayeredPackages: applet-window-buttons cdemu-client cdemu-daemon coolercontrol gamemode kde-cdemu-manager-kf6 konsole kvantum liquidctl plasma-sdk rEFInd rEFInd-tools rmlint rmlint-gui
            LocalPackages: rEFInd_GUI-1.4.2-1.fc39.x86_64 sbctl-0.16-2.fc41.x86_64

Hardware

Processors: 6 × AMD Ryzen 5 7600X 6-Core Processor
Memory: 32 GiB of RAM (30.9 GiB usable)
Graphics Processor: AMD Radeon RX 7900 GRE
Manufacturer: ASRock
Product Name: B650M Pro RS WiFi

Extra information or context

Running recipe: enroll-secure-boot-key...

sudo mokutil --timeout -1
echo 'The next line will prompt for a MOK password. Then, input "universalblue"'
The next line will prompt for a MOK password. Then, input "universalblue"
sudo mokutil --import /etc/pki/akmods/certs/akmods-ublue.der
input password: 
password should be 1~256 characters
input password: 
password should be 1~256 characters
input password: 
password should be 1~256 characters
Abort
error: Recipe `enroll-secure-boot-key` failed on line 35 with exit code 255

running the just directly works fine

ujust enroll-secure-boot-key                                                                                                                                                                                ─╯
sudo mokutil --timeout -1
[sudo] password for zany130: 
echo 'The next line will prompt for a MOK password. Then, input "universalblue"'
The next line will prompt for a MOK password. Then, input "universalblue"
sudo mokutil --import /etc/pki/akmods/certs/akmods-ublue.der
input password: 
input password again: 
echo 'At next reboot, the mokutil UEFI menu UI will be displayed (*QWERTY* keyboard input and navigation).\nThen, select "Enroll MOK", and input "universalblue" as the password'
At next reboot, the mokutil UEFI menu UI will be displayed (*QWERTY* keyboard input and navigation).\nThen, select "Enroll MOK", and input "universalblue" as the password

And then, on reboot, I can enter the MOK password, and secure boot is successfully working on my system.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingupstream

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions