After a few days (9?) I have an active account.
I hope that the content of the post I wrote on September 1st is still relevant.

Applies to: Ventoy ver. 1.0.99.

On August 31, 2024, Debian was updated (12.6 -> 12.7, 11.10 -> 11.11).
In these releases, among other things, shim packages were updated (to version 15.8, signed to 1.44+15.8).

Even oldoldstable Buster received an update: https://tracker.debian.org/pkg/shim-signed (sic!).

In these updates, to put it simply, shim numbers were raised from 2 to 4.
You can see these numbers by issuing the command:
mokutil --list-sbat-revocations

Debian was probably the last to do it.
Fedora, OpenSuse did it earlier. 
Also Ubuntu/Mint/Clonezilla, which downloaded the latest shim from Debian Sid.
Even Windows reportedly released such an update on August 13.

Now that we have Secure Boot enabled (+ Ventoy UEFI key included) and new shim numbers in UEFI, we will not be able to start older systems (e.g. installed on a USB stick) that do not contain this update.

We will see the message:

Verifying shim SBAT data failed: Security Policy Violation
Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation

and after a few seconds the computer will turn off by itself.

The only thing we can do then is to enter BIOS and disable Secure Boot or disconnect the USB drive with the older system (lower shim numbers).

We can also lower the shim number in the computer's UEFI (# mokutil --set-sbat-policy delete) or try to replace files in the Ventoy /EFI/BOOT/ directory ourselves.

Updating Ventoy on the updated system (shim 4) does nothing - Ventoy still has files from 2024-06-08 in the /EFI/BOOT/ directory.

That's why I think there's no point in trying to figure it out yourself.

A big request to Ventoy developers - update Ventoy.

Best regards.

求助：如图，我在使用iventoy安装windows系统搭配xml文件时，进入setup界面会自动重启；
xml文件确定没问题 使用ventoy制作的U盘搭配是正常安装的，尝试过win10和win11多款主板都是同样现象；有类似问题的吗 希望能得到指导，谢谢！

I installed, updated and prepared a windows 11 individual installation with some basic user configuration we use here. The iso file gets around 20 Gig big. If starting iventoy via the play button it runs into this message "Info, Service unavailable, the page will close!"
I used "Dism /Capture-Image" to capture the installation and "oscdimg\oscdimg.exe" to create the iso.

The log says nothing useful for that, see attachtment.



If I put the standard installtion install.wim from the windows 11 installation image into the source dir for creating the iso, iventoy starts as expected. Means for me, that least my iso creation process should work.

Maybe the general question is, is Iventoy a tool to deploy ISO images with pre installed software in such big images at all?



Regards

   Thomas

I've installed the current version of Ventoy on a USB thumb drive, leaving about 40GB space free at the end.

I created 3 additional partitions in the free space, FAT32 for ` /GRUB/grubx64.efi `, a swap partition, then a single ext4 partition to install Linux (grub, EFI mode).

Then I added a ` /ventoy/ventoy_grub.cfg ` grub configuration file to use under the [F6] key option in Ventoy.

Everything works as expected except one small issue. I've tested the USB in vbox on Linux, and booted directly on my EFI HP pc. Similar results are the [F6] key does not bring up a boot menu if Ventoy is started in EFI mode.

When starting Ventoy in MBR mode, the [F6] grub menu shows up, Ventoy themed, and the Linux OS boots and runs well.

Is there a solution for this? All my computers are EFI except one old box I still have available.

Also, how would I manually add my ` ventoy_grub.cfg ' entries directly to Ventoys grub menu, to eliminate having to use [F6].

On BOTH the USB drives on which I run Ventoy, I now as of a few days ago, get an error message on trying to boot which says:

"Verifying ..... data failed. Security Policy Violation .... data failed. Something went seriously wrong".

I can't read all of it because it is in tiny print and only on the screen for a short period. I any event, Ventoy won't boot and I gather from some somewhat apocryphal reports I have seen, that it has something to do with something MS has done very recently.

Hopefully Ventoy will be able to overcome the problem.


EDIT: if you turn SECURE BOOT off, it all works. But I imagine that turning Secure Boot off in a workplace environment is not an option so hopefully Ventoy will be able to overcome this issue.

Hello! So i am trying to install Fedora OS with persistence on my USB for educating. I used a guide from this video https://www.youtube.com/watch?v=vJ8TMSZwo0I&t=1s and it worked really well with Linux Mint and Kali! So the main question is that the guide from https://www.ventoy.net/en/plugin_persistence.html says
"Need to add 

I want to use steamdeck recovery image in ventoy. When i look up the supported os 。I find that tje steam os is supported。But when I copied the recovery image to the ventoy disk,the svreen is black,I can't enter the steam os desktop successfully。So what is the reason?

As ventoy support fixed/dynamic size VHD for Windows,
If I have a 20GB dynamic size VHD, actually size is 10GB on disk.
After boot from this VHD, I see it's actual size will change to 20GB.
An additional 10GB of space has been allocated.
I want to know if this additional allocation takes up too much time？
If it's a 100GB VHD actually using 10GB, will it take more time to boot?

AQC113 shows "no more network devices" why?

Attached Files

Thumbnail(s)
   

I formatted a 32gb drive. I selected it and instructed VT to write to that drive, and Ventoy reported, "completed successfully", But the drive, now named Ventoy is blank.  A DVD drive with no disk in it shows that Ventoy is installed on it.  WTF?