SGX disabled by bios

Support Update
1

Hello,

I did an update last night around 8pm with the command sudo kaisen-update. This morning when I boot up my PC, I get the following error:

[ 0.133958] x86/cpu: SGX disabled by BIOS

BusyBox v1.35.0 (Debian 1:1.35.0-2) built-in shell (ash)

Of course I looked in my bios to see if I had this option, but I don’t (that would be too easy).

Can you help me?

2

Hello Jules,

I hope you are well.

You booting on busybox because the initramfs was not charged correctly?

If this the case, this message is normal :slight_smile:

3

Hum… it’s possible, I’m coming to an initramfs terminal.

Do you have an idea for solving this? Do you need more information?

4

Yes, the initramfs is corrupted.

Try to start Kaisen on the recovery mode (in the GRUB menu, you can select avdanced options and select the submenu recovery).

Give me a feedback after that :slight_smile:

5

So this is the result :

IMG_20220914_113147__01
IMG_20220914_113147__011824×2344 426 KB

But, I have a good news :slight_smile:

Only 5.19.0-kaisen1-amd64 is affected !

My 5.17.0-kaisen1-amd64 boot correctly

6

Great,

You anticipated my request, it was the next one ^^

Can you run this command to remake the initramfs for all kernel availables: sudo update-initramfs -u -k all?
Probably an update that caused this problem with initramfs (for example, an error pending the regeneration of the initramfs)

7

I did the command, it did generate the initramfs conf for both versions unfortunately it did not fix the problem. And I can’t boot on version 5.17.0-kaisen1-amd64

Recovery Mode of 5.17.0-kaisen1 :

IMG_20220914_124213__01
IMG_20220914_124213__011920×1549 280 KB

Recovery Mode of 5.19.0-kaisen1 it’s the same of the last post

8

Very strange!

Do you use BTRFS?

9

Yes, I try to boot with a snapshot from the grub?

10

If it’s possible, yes, and retry to running an update!

After, you can restore a snapshot with the apt-btrfs-snapshot set-default command.

The detailed process is documented here:
https://kaisenlinux.org/documentation/advanced-btrfs-utilisation.html#apt-snapshots

11

Hi @Kaisen and Community !

I’m present you the solution of SGX.

(Intel® Software Guard Extensions) “provides hardware-based memory encryption to isolate specific pieces of code and data from an application in memory.”

So I found this project for linux → GitHub - intel/sgx-software-enable

TIPs : you can use a live usb with chroot, it’s works great !

If you want state of sgx you can execute :

kaisen@kaisenlinux  ~/sgx-software-enable   master  sudo ./sgx_enable --status
Intel SGX is disabled and can be enabled using this utility.

If you want to enable sgx

kaisen@kaisenlinux  ~/sgx-software-enable   master  sudo ./sgx_enable         
Software enable has been set. Please reboot your system to finish
enabling Intel SGX.

(ok in this post, I have another problem, about initramfs but it’s not the main topic, so if you need help about it, tell me, I’ll help you :smiley: )

12

Hello @jagostini !

Thank you for the feedback! I’m glad your problem is solved!

Thanks too for the link of this repo !

I think you should explain here how you have solved the problem with initramfs, no problem for me :grin: