Sbctl is trying to sign an old kernel that I deleted

General
1

Hi guys, I’ve been searching the forums but can’t find a solution to remove the signature boot of an old kernel. For example, when I do an update with ‘sudo pacman -Syu’ and it updates my current kernel, sbctl also tries to sign an old kernel that I uninstalled, which results in an error: failed signing /boot/vmlinuz-linux-cachyos: /boot/vmlinuz-linux-cachyos does not exist.

Does anyone have a solution to fix this?
Thanks in advance.

2

I think you can remove with sbctl the files, which should be signed. Ill check it up

3

Thanks for the info!
I found the commands on the Arch wiki and successfully removed it. I’ll leave the commands here in case anyone else runs into the same problem

  1. sudo sbctl verify
    Verifying file database and EFI images in /boot…
    ✓ /boot/EFI/BOOT/BOOTX64.EFI is signed
    ✓ /boot/EFI/systemd/systemd-bootx64.efi is signed
    :bangbang: /boot/vmlinuz-linux-cachyos does not exist
    ✓ /boot/vmlinuz-linux-cachyos-bore-lto is signed

~
2- sudo sbctl list-files

/boot/EFI/BOOT/BOOTX64.EFI
Signed: ✓ Signed

/boot/EFI/systemd/systemd-bootx64.efi
Signed: ✓ Signed

/boot/vmlinuz-linux-cachyos: open /boot/vmlinuz-linux-cachyos: no such file or directory

~
3- sudo sbctl remove-file /boot/vmlinuz-linux-cachyos
Removed /boot/vmlinuz-linux-cachyos from the database.

~
4- sudo sbctl verify
Verifying file database and EFI images in /boot…
✓ /boot/EFI/BOOT/BOOTX64.EFI is signed
✓ /boot/EFI/systemd/systemd-bootx64.efi is signed
✓ /boot/vmlinuz-linux-cachyos-bore-lto is signed