“os-prober is disabled with the grub 2.06 upload, which is obviously a bit controversial and the outcome is not necessarily in the best interest of our users”

os-prober is inherently insecure as it mounts all partitions on your disk using grub-mount to check them for other OS, which is not a nice thing to do as root can exploit bugs in the filesystem code easily.” (src by jak-linux.org a ubuntu core dev)

really don’t get the issue, os-prober should (just as stated RedHat does) only run during setup once, detect all bootable OS then write some config that probably stays like this for some time.

if this is a security problem, then os-probler should not run after kernel-updates?

but of course the user should be able to start a manual “scan for OS” anytime the system is changed e.g. new harddisk attached and OS installed.

how to re-enable grub detecting other OS:

hostnamectl; # tested on
Operating System: Debian GNU/Linux 12 (bookworm)  
          Kernel: Linux 6.1.0-16-amd64
    Architecture: x86-64

su - root
echo "GRUB_DISABLE_OS_PROBER=false" >> /etc/default/grub
update-grub2

# sample output
Generating grub configuration file ...
Found background image: .background_cache.png
Found linux image: /boot/vmlinuz-6.1.0-16-amd64
Found initrd image: /boot/initrd.img-6.1.0-16-amd64
Found linux image: /boot/vmlinuz-6.1.0-15-amd64
Found initrd image: /boot/initrd.img-6.1.0-15-amd64
Warning: os-prober will be executed to detect other bootable partitions.
Its output will be used to detect bootable binaries on them and create new boot entries.
Found Windows Boot Manager on /dev/nvme0n1p1@/efi/Microsoft/Boot/bootmgfw.efi
Adding boot menu entry for UEFI Firmware Settings ...
done

alternative to re-enabling os-prober: select a new default boot device via BIOS.

liked this article?

  • only together we can create a truly free world
  • plz support dwaves to keep it up & running!
  • (yes the info on the internet is (mostly) free but beer is still not free (still have to work on that))
  • really really hate advertisement
  • contribute: whenever a solution was found, blog about it for others to find!
  • talk about, recommend & link to this blog and articles
  • thanks to all who contribute!
admin