Fedora 42 Workstation Live ISO (Final? from nightly) manipulates EFI without permission

I have just seen the posts at Merely booting some Fedora Linux 42 Live media adds an entry to the UFI boot table and Fedora Magazine.

The workaround is straightforward: remove the unwanted entries from within the Live session or booted from an installed system.

To do so, open a shell and inspect the current configuration by executing efibootmgr. You’ll get an output like this

BootCurrent: 0007
Timeout: 0 seconds
BootOrder: 0001,0007,0000
Boot0000* UiApp	FvVol(7cb8bdc9-f8eb-4f34-aaea-3ee4af6516a1)/FvFile(462caa21-7614-4503-836e-8ab6f4662331)
Boot0001* Fedora	HD(1,GPT,2bdebcd0-a66a-45a2-8ae8-b88476be27b0,0x800,0x12c000)/\EFI\fedora\shimx64.efi
Boot0007* Fedora	PciRoot(0x0)/Pci(0x1f,0x2)/Sata(0,65535,0)/CDROM(1,0x11a2c2,0xf000)/\EFI\fedora\shimx64.efi

Look at the two entries labelled “Fedora”. As you can see, the first enty (Boot0001) points to the right location on the disk. To Verify, compare the displayed UUID with sudo blkid

Output should look like this:

/dev/zram0: LABEL="zram0" UUID="f33f2365-c1e6-4fd2-8260-a9a8cbfcd890" TYPE="swap"
/dev/vda2: UUID="8cfcfdde-cea7-4f68-be9b-a98480cf1c9f" BLOCK_SIZE="4096" TYPE="ext4" PARTUUID="f230f706-89e9-468b-be27-8adf586e71a6"
/dev/vda3: LABEL="fedora" UUID="2c3070fd-ea74-4b8a-846e-a13e0e51f741" UUID_SUB="b05af1b2-f925-4443-b5dd-61df8531e8f0" BLOCK_SIZE="4096" TYPE="btrfs" PARTUUID="2e549dfe-4735-4dd4-8000-cf5fe0200f16"
/dev/vda1: UUID="C744-572F" BLOCK_SIZE="512" TYPE="vfat" PARTLABEL="EFI System Partition" PARTUUID="2bdebcd0-a66a-45a2-8ae8-b88476be27b0"

Compare the PARTUUID from the EFI System Partition. It should match the UUID from efibootmgr.

Get rid of the other entry, which points to the DVD drive. There are several ways to accomplish this. Use efibootmgr to remove it – this should work in most cases. If that doesn’t work, enter the BIOS and remove the boot entry by hand. The BIOS manufacturer will determine the exact method.To remove the entry using efibootmgr, note the number in the first row of the output. In this example, it is Boot0007. We only need the four digits for removal:
Use the following command to remove the entry: sudo efibootmgr -b 0007 -B

You will then see a new list of boot entries as confirmation:

BootCurrent: 0007
Timeout: 0 seconds
BootOrder: 0001,0000
Boot0000* UiApp	FvVol(7cb8bdc9-f8eb-4f34-aaea-3ee4af6516a1)/FvFile(462caa21-7614-4503-836e-8ab6f4662331)
Boot0001* Fedora	HD(1,GPT,2bdebcd0-a66a-45a2-8ae8-b88476be27b0,0x800,0x12c000)/\EFI\fedora\shimx64.efi

Reboot. You’re all set.

I’ve tested this on a libvirt KVM.

DISCLAIMER: THIS POST IS PROVIDED “AS IS” WITHOUT ANY WARRANTY.