Linux

This has nothing to do with Lenovo perse, this is the average experience for every laptop I've owned which had Secure Boot turned on.

You know what is fun? Having your Dell basically bricking because Fedora starts shipping a new version of shim-x64 which completely fails the UEFI handover to bootloader. Leaving you unable to boot at all, so no chance of reaching rescue mode. Then more fun times of booting a live environment from a usb stick after going through the same hoops you went through, finding out how to decrypt your BTRFS partitions, manually mounting and chrooting them so you can finally downgrade the offending package.

Linux and Secure Boot just isn't a great combination if you ask me.

It's impossible to make the situation with BIOS easier. Incorrect boot order and secure boot are enabled by default for security and Windows compatibility reasons. Though I never heard that it's required to turn on legacy mode and change it back. Probably it's a highly model-specific thing. And btw secure boot is Mint's fault. It just doesn't support it yet

This sounds like it was strictly the fault of the USB load. If you make a UEFI USB (you should use Ventoy, it's great btw) all you would need to do is shut off Secure Boot and install.

Most bootable drives don't support Secure Boot. You turn it off, do the install, and turn it back on if you want it. I personally just leave it off.

Outside of those caveats everything you described is industry-standard stuff. Nothing to do with Lenovo.

Being unable to boot from a USB drive in UEFI mode sounds like a Mint problem. I just booted from an Ubuntu LTS USB on a similar machine, installed with all default BIOS. Haven't touched Secure Boot either. No trouble.

I had to go into the BIOS, turn UEFI to legacy, turn off secure boot, reboot to boot from the USB stick, install Mint, then turn legacy back to UEFI to get it to boot from the hard drive.

That is ridiculous and it does sound like a Lenovo problem.

I'm running Mint on a Surface Laptop (which was difficult to install because Microsoft), but getting Secure Boot working only required changing the UEFI settings to allow non-Microsoft Secure Boot certificates. With that set Mint boots just fine both with Secure Boot enabled and disabled. So do USB installation ISOs.

Secure Boot can still be a pain. To get Virtualbox working with it enabled required signing several kernel modules which took a while to figure out.

Mint is great though. After distrohopping for years I finally decided I wanted to just use the OS and GUI, not play around with them and I came back to Mint. The latest versions of Mint just work and work for years once they're installed. For me, going back to Windows (especially W11) feels like punishment. I hope you enjoy the switch.

Wow what a ride. Congrats on making it work, I'm not sure if I wouldn't have given up at some point. Great job!

About kissing M$'s ass, don't get me started on updating the BIOS on a HP Laptop, they require you to do that in Windows cause it's the only way to get their downloader to run. So it's not only Lenovo's Laptops that don't play nice with Linux.

Thanks for the update <thumbs_up>

Well, you shouldn't have to turn UEFI off to boot from the USB stick. That one could actually be on Mint. Or on the way the stick was created. It's been a while since I messed with this stuff but by now a typical Linux installation medium should be able to boot with UEFI.

The secure boot is enabled by default so that only signed operating systems and not some malware can boot the computer. And I guess it's legitimate to not have the keys of all the Linux distributions under the sun in there.

Well done. It’s a Lenovo issue. Had to do the same thing recently for a friends laptop and did the same dance.

I have some IT background so kind of knew what to look for but it still was a pita.

That sounds extremely infuriating! Regarding Lenovo and Linux Mint, I actually had a very good experience with them a little over a year ago. I bought a new IdeaCentre 5i pre-built desktop tower and had zero issues installing Mint on it. All I had to do was press F12 and select to boot from the bootable USB to install, no screwing with the BIOS or anything. But I've never tried installing Linux on a laptop. I only use desktops.

You should have been able to boot from USB and install fully in UEFI mode with Secure Boot enabled, but sometimes the method you use to make the bootable USB can screw that up. I've always had good luck with Ventoy.

I don't feel like that's exclusive to Lenovo, fwiw. I have an Asus laptop, and it went like that for me installing Linux from a USB stick. It was a hassle and you're right that it seems harder than it needs to be.

I don't have any idea why it's like that, but it feels like it's a better option than someone being able to walk up to my PC/laptop/whatever and change my os just by using a thumb drive without any other hoops to go through. That's just where I stand on the issue, but you're right that it sucks for the owner/user.

I recently installed it on a t480 while distrohopping. I didn't need to turn off uefi, secure boot has been off since i got this laptop and i never turned it back on. My best guess is that you either did something wrong when making the live media, or during the installation. Next time try using ventoy, it's a really useful tool.

UEFI looks like another over-complicated proprietary shit that make PC more and more locked.

That's surprising, Thinkpad x240 owner here. With all the os i installed on it i never had to do such overcomplicated manipulation, just bios entering + boot on usb.

You probably should use uefi as it is better in a lot of ways.

Edge ISO might have helped. It even supports secure boot.

As someone who also installed Mint on a Lenovo, I feel your pain. The only difference is that I was aware of the BIOS setting before I did the install because I'd read some forum posts preparing myself for the install.

I totally agree. I am an IT Profe and it's still very irritating to have to jump through these hoops. Plus each manufacturer has a different key you need to press to access the bios. Sometimes the same OEM will have different keys on different models.

So you try the normal ones which don't work and then have to Google the model number to try find out which key to hold.

Frustrating and time consuming. And definitely makes it very difficult for the average user to install Linux.

I sometimes think Microsoft did it on purpose to hinder Linux installs and then disguised it as "security".

It's not really "security" if you can turn it off is it?