내용으로 건너뛰기

Ubuntu Pro 20.04 FIPS Mode Unable to Log In

0

I have an Ubuntu Pro 20.04 FIPS Mode instance that I have been hardening, when I add a grub password the system won't boot. It seems as if the grub password is being prompted for prior to the EC2 serial console being available. If I use an instance that isn't FIPS enabled, everything works as designed, any help would be greatly appreciated.

질문됨 2년 전387회 조회
2개 답변
1

I have learned more, it appears that the Ubuntu Pro images are created without UEFI and may be the cause of this issue. I created a Pro and a non-Pro image and compared grub.cfg and the only stand out difference was UEFI. #Non-Pro

### BEGIN /etc/grub.d/25_bli ###
if [ "$grub_platform" = "efi" ]; then
  insmod bli
fi
### END /etc/grub.d/25_bli ###

### BEGIN /etc/grub.d/30_os-prober ###
### END /etc/grub.d/30_os-prober ###

### BEGIN /etc/grub.d/30_uefi-firmware ###
if [ "$grub_platform" = "efi" ]; then
	fwsetup --is-supported
	if [ "$?" = 0 ]; then
		menuentry 'UEFI Firmware Settings' $menuentry_id_option 'uefi-firmware' {
			fwsetup
		}
	fi
fi

#Pro

### BEGIN /etc/grub.d/30_uefi-firmware ###
									 
					   
					  
																		   
		  
   
   
  
### END /etc/grub.d/30_uefi-firmware ###
답변함 2년 전
0

Take a look at this blog post about accessing Grub from the EC2 Serial Console.

https://aws.amazon.com/blogs/compute/using-ec2-serial-console-to-access-the-grub-menu-and-recover-from-boot-failures/

Hope this helps!

AWS
전문가
답변함 2년 전
전문가
검토됨 2년 전
  • iBehr, I was really hopeful that this would work. I made all of the changes and rebuilt grub, but the serial console still hangs. I face the same issue when trying to connect from Cloudshell. The SSH keys copy successfully, but when I try to ssh to the instance it just hangs.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.