Difference between revisions of "Rocky 9.x Ventoy"

From Notes_Wiki
(Created page with "Home > Rocky Linux or CentOS > Rocky Linux 9.x > System Administration > File system management > Rocky 9.x Ventoy It is better to use Ventoy to have multiple OS installers on a single USB in comparison to dd approach or Rufus or some live USB creator. For creating bootable USB via Ventoy use: # Go to https://www.ventoy.net/en/download.html and download Linux .tar.gz file...")
 
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
[[Main Page|Home]] > [[Rocky Linux or CentOS]] > [[Rocky Linux 9.x]] > [[Rocky 9.x System Administration|System Administration]] > [[Rocky 9.x file system management|File system management]] > [[Rocky 9.x Ventoy]]
= Ventoy USB with Secure Boot + TPM - Step by Step =


It is better to use Ventoy to have multiple OS installers on a single USB in comparison to dd approach or Rufus or some live USB creator.  For creating bootable USB via Ventoy use:
== Step 1: Download Ventoy ==
# Go to https://www.ventoy.net/en/download.html and download Linux .tar.gz file
* Go to the [https://www.ventoy.net Ventoy official website] and download the latest release.
# Extract the Linux tar.gz file.
# Go to that folder as root user
# Identify device name for pen-drive via "fdisk -l". *Be very careful if you make mistake you will wipe some wrong device.*
# Then install ventoy on the drive using:
#:<pre>
#:: ./Ventoy2Disk.sh -i /dev/sdb
#::  # say y twice
#:</pre>
# If you now do fdisk -l there should be /dev/sda1 with maximum space and /dev/sda2 approx 35MB with ventoy
# Copy required ISO to /dev/sda1 after mounting it on some local folder
# Reboot and test


Refer:
== Step 2: Extract and Prepare Ventoy ==
* https://www.ventoy.net/en/doc_start.html
Run the following commands in terminal:
<syntaxhighlight lang="bash">
cd ~
wget https://github.com/ventoy/Ventoy/releases/download/v1.0.99/ventoy-1.0.99-linux.tar.gz
tar -xvf ventoy-1.0.99-linux.tar.gz
cd ventoy-1.0.99
</syntaxhighlight>


== Step 3: Enable Secure Boot + TPM ==
* Make sure **Secure Boot** and **TPM** are enabled in BIOS/UEFI settings.


== Step 4: Install Ventoy with Secure Boot Support ==
Unmount your USB drive if mounted, then run:
<syntaxhighlight lang="bash">
sudo ./Ventoy2Disk.sh -i /dev/sda -s
</syntaxhighlight>
''(Replace /dev/sda with your actual USB device.)''


== Step 5: Copy ISO Files ==
* After installation, unplug/replug your USB.
* Copy your **.iso** files into the Ventoy partition.


[[Main Page|Home]] > [[Rocky Linux or CentOS]] > [[Rocky Linux 9.x]] > [[Rocky 9.x System Administration|System Administration]] > [[Rocky 9.x file system management|File system management]] > [[Rocky 9.x Ventoy]]
== Step 6: Boot and Enroll Key ==
* When booting the first time with Secure Boot ON, a blue screen will appear. 
* Select:
  * '''Enroll key from disk''' → `EFI/ventoy/ventoy.cer` → Confirm → Reboot.
 
== Step 7: Boot ISOs Normally ==
* Ventoy is now trusted, and you can boot any ISO with Secure Boot + TPM enabled.
 
== Recovery Key (Important) ==
To view the recovery key after encryption:
<syntaxhighlight lang="bash">
sudo snap recovery --show-key
</syntaxhighlight>
 
* The recovery key will also be saved in your cloud.
* '''Important:''' Keep this key safe for future use.

Latest revision as of 09:33, 10 September 2025

Ventoy USB with Secure Boot + TPM - Step by Step

Step 1: Download Ventoy

Step 2: Extract and Prepare Ventoy

Run the following commands in terminal:

cd ~
wget https://github.com/ventoy/Ventoy/releases/download/v1.0.99/ventoy-1.0.99-linux.tar.gz
tar -xvf ventoy-1.0.99-linux.tar.gz
cd ventoy-1.0.99

Step 3: Enable Secure Boot + TPM

  • Make sure **Secure Boot** and **TPM** are enabled in BIOS/UEFI settings.

Step 4: Install Ventoy with Secure Boot Support

Unmount your USB drive if mounted, then run:

sudo ./Ventoy2Disk.sh -i /dev/sda -s

(Replace /dev/sda with your actual USB device.)

Step 5: Copy ISO Files

  • After installation, unplug/replug your USB.
  • Copy your **.iso** files into the Ventoy partition.

Step 6: Boot and Enroll Key

  • When booting the first time with Secure Boot ON, a blue screen will appear.
  • Select:
 * Enroll key from disk → `EFI/ventoy/ventoy.cer` → Confirm → Reboot.

Step 7: Boot ISOs Normally

  • Ventoy is now trusted, and you can boot any ISO with Secure Boot + TPM enabled.

Recovery Key (Important)

To view the recovery key after encryption:

sudo snap recovery --show-key
  • The recovery key will also be saved in your cloud.
  • Important: Keep this key safe for future use.