Microsoft’s latest security update has ruined dual-boot Windows and Linux PCs
The update wasn’t supposed to reach dual-boot PCs.
It is a time for a single linux boot.
I never did dual boot. The first time moving from windows 2000 to Linux, my hard drive was only 2 GB and I couldn't fit both of the OS:es on it, so I nuked the windows one.
At one point my 1GB disk was the "big one" in the dorm. It was the windows share of some random media. I had room for the whole 40MB videos "Jesus vs Frosty" (The Spirit of Christmas) and "Jesus vs Santa Claus". It was before South Park became an actual show, but people watched those 100's of times off my hard drive.
When I bought a 3GB from Fry's it was an open question how we'd fill it. Of course, that was just as the mp3 codec started to gain traction... Problem solved.
That is freedom.
So they were trying to patch systems that use GRUB for Windows-only installs? What a load of BS. Why would anybody install GRUB to boot only Windows with that? Or am I overlooking something?
Furthermore, if GRUB has a security issue, they should've contributed a patch at the source instead of patching it themselves somehow. I'm a bit stunned at the audacity of touching unmounted filesystems in an OS patch. Good thing Windows still doesn't include EXT4 and BTRFS drivers because they might start messing with unencrypted Linux system drives at this rate
[This comment has been deleted by an automated system]
What is that latter fallback called? I set up my boot manually using an EFI stub last time I installed arch but wasn't aware of any fallback bootloader
lol they fuck with my BIOS boot settings to the point i had to password it. they are that bad.
In the mind of Microsoft, Windows is the only OS and all things on computers exist to facilitate Windows.
Grub has already been patched, that doesn’t mean distributions shipped it. SBAT broke systems that hadn’t been updated.
I agree they should have sent a patch to the grub source, but keep in mind big software companies like microsoft, Verizon, ... do not normally allow their product teams to send a patch or PR to open source projects. This is because in their contract it states that all code written on and during company times is owned by the company. This means that it is impossible for them to make a patch or PR because it would conflict with the projects licence and fact its open source.
This changes when the team explicitly works on the foss product/project like the ms wsl team or the team working on linux supporting azure hardware, but that is an exception. I do not believe the microsoft kernel/bootloader team is allowed to send patches to grub.
Its a terrible thing, and it shouldnt be, but thats the fact of the world atm.
This means that it is impossible for them to make a patch or PR because it would conflict with the projects licence and fact its open source.
That's not how it works. It just means the company owns the code for all intents and purposes, which also means that if they tell you that you can release it under a FOSS license / contribute to someone else's project, you can absolutely do that (they effectively grant you the license to use "their" code that you wrote under a FOSS license somewhere else).
What? Microsoft have written and released and contributed to many open source projects - they created vscode for one. They are even one of the top contributors to the Linux kernel.
this changes nothing: microsoft should have sent a patch remains microsoft should have sent a patch; internal policies are irrelevant to actions effecting external projects
undefined
°-°
/|-👍
/ \
That's what happens when you don't keep windows locked inside a virtual machine.
Microsoft breaks bootloader and nixes Linux partition
Microsoft: "patch seems to be working as intended"
This is a regular occurrence and honestly we need to stop recommending dual boot. Use separate drives if you need to, but sharing the same drive is destined to brick something
I literally got this error using a bootable SSD with Ubuntu Mate on it. Separate drives aren't immune to the issue.
This isn't true if you have a bootloader on each drive, which, I think, is what the we're talking about.
But having 2 drives does not solve the boot loading issue, I mean, even if you have two drives, you still have only one bootloader, not?
No. You can have more than one EFI system partition with separate bootloaders on each drive and set their boot order in the BIOS, just like booting from USB or anything else.
This is also possible with just one drive. The efi boot entries for each OS are stored separately in the efi system partition.
even if you have two drives, you still have only one bootloader, not?
The idea is to have completely separate boot and OS drives. You select which one you want to boot through the BIOS boot selection (ie. pressing F10 or F11 at the BIOS screen).
This functionally makes each OS "unaware" of the other one.
You can have a own EFI partition per Drive (and on it whatever bootloader you want). You then need to use the UEFI boot menu if you want e.g. boot the Windows one. If you have 2 different OS on different drives they should never interfere with each other.
Well, i mean you could of course use the Linux Bootmanager to then forward to the Windows boot manager on the other disk. but i never experimented with that.
I don't think dual boot has ever been a good solution (unless you also run one or both of the OS's under the other in a VM).
Like, if you are unsure about linux, trying it out, learning, whatever, you can just boot a live"cd", or maybe install it on an external (flash) drive.
If you are kinda sure you want to switch, just nuke Windows; it's easier to switch that way than to have everything on two systems, having to switch.
Doesn't Windows break dual booting semi-regularly? I've always avoided it as I've had friends get burned by this in the past. I guess I just keep different OSes on different drives, but that obviously isn't feasible for everyone.
Legit have never had an issue with multi boot and windows like ever, tbf I don't go into windows that frequently anymore but it's never given me grief in at least a decade. I know my experience isn't universal though, so sorry to anyone who does have boot issues after windows updates.
In the worst case, could use bcdedit and use the windows boot loader (tbh I have no idea if that works here, but could be worth a try)
It’s a lot better in uefi, MBR dual booting was always sort of hacky.
I have dualboot set-up on my MacBook and have no. But it is a long time ago, since I last started macOS and my Mac would not get new macOS updates anyway😂 that was the reason to install Linux in the first place 😝
Remove your Microsoft installation, done.
Yes but...
But what? This is Microsoft, they fucked it up so many times that it's either incompetence or sabotage, and knowing Microsoft, it's probably both.
This is the same company that invented millions to sabotage Linux through the legal system (hello sco), and the same company that in purpose left gaping security holes open as to not lose any money, causing China to hack the US government through said holes.
Then we decide that just that money isn't enough so we'll spy on you at every step of the way, we will force feed you ads, and we'll use you to train our shitty AI
Frack Microsoft, frack any and all of their software.
If you need to dual boot, be sure to use separate EFI partitions for windows and Linux, separate drives if possible. Windows has done this far too many times.
Just remove Windows. One problem less on the list.
+1. I do this
and unplug your linux drive when booting windows, just in case
Not the first time. I thought a Windows 10 update wiped grub, but Microsoft actually deleted my entire Linux partition. Others have experienced the same thing.
Windows is required for a couple of apps I need with no alternatives, but the only way it runs on any of my computers is in a VM.
How do people use Windows with confidence, with stories like these?
stockholm syndrome
as they like to do every once in a while
I put windows in the shame box (VM).
I recently discovered that Rufus has an option to set up a Windows ISO as "Windows on the go" so I dug out an old 500Gb SSD that had a USB adapter with it and installed Windows on that. So now instead of dual booting I can just hit F12 and boot from USB on the rare occasions when I need to run something in Windows.
It's also quite satisfying to be able to physically remove Windows and shove it into a drawer when it goes full Windows too lol.
This has been my solution for a long time.
Microsoft! You missed your last chance to stay on my computers with your os. Take care, so long and thanks for all the cons.
"wasn't supposed to"
Are you quoting CroudStrike?
I'm quoting OP's summary (or quote). I'm implying that Microsoft is hostile to Linux installations generally.
Yess, let the hate flow through you! ⚡
I had the intention of reinstalling my windows because it was like from back when win10 was new and the winsxs folder was so big that a 100GB partition was not enough for just windows with all the 3rd party programs installed on another partition... but I noticed that all my games run on Linux so I ended up wiping the 100GB nvme windows partition and moving my dual boot Linux there. I've been without windows for a couple of months now and I haven't really missed it.
The only way to fix your computer is to uninstall all spyware like Windows
This reminds me I still have a win 10 partition on my drive. Ye! Extra space to reclaim!
This again?
So, excusing my ignorance as a fairly recent Linux convert, what does this mean for my dual boot system?
I haven’t booted windows for weeks and am pretty sure there have been no updates since it was freshly reinstalled (maybe 6 months ago) as a dual boot with Debian.
Is this only a problem if I allow Windows to update?
Are Microsoft likely to fix the issue in a subsequent release?
Yes, you don't have to worry as long as you don't boot up windows and let it install the update.
This is not the first time they break dual boots by touching the partitions, but this is the first time they deliberately break it (that I know of). I always had windows on its own drive because of that. If you don't use windows a lot then I would suggest to do the same. You have to change to windows through bios but it isn't that much more work.
Thanks for the reply, and good to know!
I think I’ll blow away the windows install on this machine completely.
I still have another pc for some audio tools that don’t run under Linux, but this machine is my daily driver now and I couldn’t be happier.
And just in case when installing windows on its own drive, only have the windows drive mounted so it doesn't write to the linux drive.
FWIW, I'm dual-booting windows and mint atm. Separate drives, but just one EFI partition, and this update hasn't borked things for me.
I guess I switch to single boot Fedora Silverblue just in time
Well, you can just fix the bootloader, but that's not super exciting I guess.
People who dual boot are likely to be linux newbies just trying it out. They're more likely to blame linux when microsoft does what it does to competitors.
I dual boot and am maybe considered a newbie. But I’ve had this set up for about a year slowly preparing to stop using Microsoft crap. It’s part of a longer path to digital privacy that was kicked into gear when the win 11 update made my Wi-Fi card disappear, like gone- like it was never installed. Fuck HP and Microsoft
Ironically I had disabled secure boot to try another distro. Was going to drop Ubuntu for something else, still might but no rush, plenty to learn.
I blame Linux distributions for not updating when the security vulnerability has been fixed for years a little more than I blame Microsoft for untrusting old vulnerable software versions. That said, failing to figure out if it is dual booting or not when there are multiple ways of doing it was not really a surprise.
(I also remember when some Fedora ISOs were unbootable immediately after release a few years ago for similar issues, they hadn’t updated shim or similar)
I dual booted a few times back in the days of winxp and win7. Never had a good experience somehow windows or a grub update always messed up things. Haven't ran windows in years but when I have to it goes on a separate drive now.
Does having Linux and Windows on seperate drives mitigate this issue somewhat?
Wanting to start dual booting and moving to windows. Wondering if that helps at all.
Edit: I meant moving to Linux... >.>
I keep Linux and windows on separate disks, grub or windows boot manager don't know about each other. I have the Linux disk as the primary boot, if I need to boot into windows i use the bios boot selection screen. It's a bit of a pain at times(have to mash F12 to get the bios boot menu) bit it's less of a headache than trying to fix grub
If you can, put Windows in a VM instead.
Not on my experience. But separate machines would work, if Microsoft never releases a "Wi-Fi network security patch for compatibility with all machines".
Classic
Is there any issue with having windows on one drive and Linux on the other and toggling in the bios at boot? Do I introduce any problems by keeping my rarely used windows installation on a separate disk like this?
I'm not sure, but clearly something happens on the background, as my Debian drive broke after I changed it back and forth for the Windows drive. Grub fell back to rescue mode. After following some instructions and trying to boot from grub command line, Debian wouldn't boot after it recognized the mouse. That's what I know. Even in different drives, something happens on the PC when you go back and forth with Windows and Linux.
Here's how to delete the SBAT policy that the Windows Update applies.