![](https://seccdn.libravatar.org/avatar/008a8db3f6a813af5f8064f2be96e100.jpg?s=120&d=mm&r=g)
On Thu, 21 Mar 2024 06:55:08 +0300, Andrei Borzenkov wrote:
On 20.03.2024 23:54, Jim Henderson wrote:
As I don't have secure boot enabled at present, the shim certificates are probably less important, though, right?
I wonder what takes up so much space then. What is the total size of all variables? Are there any obvious outliers?
ls -l /sys/firmware/efi/efivars/
would be interesting.
The dbx files are the largest, it seems: [jhenderson@TheEarth ~]$ ls -l /sys/firmware/efi/efivars/ total 0 -rw-r--r-- 1 root root 5 Mar 19 13:16 1GPageTable-356471b1-b483-42ae-b6e7-3b2ebab14e15 -rw-r--r-- 1 root root 28 Mar 19 13:16 AMITCGPPIVAR-a8a2093b-fefa-43c1-8e62-ce526847265e -rw-r--r-- 1 root root 20 Mar 19 13:16 AsusRomLayout-2e0585e9-2b5e-4f1e-bbeb-e632c5ef44b8 -rw-r--r-- 1 root root 170 Mar 19 13:16 BiosEventLog-4034591c-48ea-4cdc-864f-e7cb61cfd0f2 -rw-r--r-- 1 root root 134 Mar 19 13:16 Boot000D-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 124 Mar 19 13:16 Boot000E-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 330 Mar 19 13:16 Boot000F-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 363 Mar 19 13:16 Boot0010-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 332 Mar 19 13:16 Boot0011-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 365 Mar 19 13:16 Boot0012-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 6 Mar 19 13:16 BootCurrent-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 5 Mar 19 13:16 BootFromUSB-ec87d643-eba4-4bb5-a1e5-3f3e36b20da9 -rw-r--r-- 1 root root 8 Mar 19 13:16 BootOptionSupport-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 16 Mar 19 13:16 BootOrder-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 6 Mar 19 13:16 CMOSfailflag-c89dc9c7-5105-472c-a743-b1621e142b41 -rw-r--r-- 1 root root 160 Mar 19 13:16 ConIn-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 160 Mar 19 13:16 ConInDev-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 40 Mar 19 13:16 ConOut-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 40 Mar 19 13:16 ConOutDev-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 5 Mar 19 13:16 CurrentPolicy-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 6326 Mar 19 13:16 db-d719b2cb-3d3a-4596-a3bc-dad00e67656f -rw-r--r-- 1 root root 6326 Mar 19 13:16 dbDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 13144 Mar 19 13:16 dbx-d719b2cb-3d3a-4596-a3bc-dad00e67656f -rw-r--r-- 1 root root 3728 Mar 19 13:16 dbxDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 16 Mar 19 13:16 DefaultBootOrder-45cf35f6-0d6e-4d04-856a-0370a5b16f53 -rw-r--r-- 1 root root 5 Mar 19 13:16 DeploymentModeNv-97e8965f-c761-4f48-b6e4-9ffa9cb2a2d6 -rw-r--r-- 1 root root 68 Mar 19 13:16 EnWpData-cbab171f-f356-4009-baaa-6628353a0a29 -rw-r--r-- 1 root root 36 Mar 19 13:16 Ep-73dad563-8f27-42af-918f-8651eb0a93ef -rw-r--r-- 1 root root 40 Mar 19 13:16 ErrOut-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 40 Mar 19 13:16 ErrOutDev-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 24 Mar 19 13:16 FanCalibrateData-948343ac-a700-4fab-91c1-ac27c16a0cc3 -rw-r--r-- 1 root root 5 Mar 19 13:16 FanCalibrateFlag-ec87d643-eba4-4bb5-a1e5-3f3e36b20da9 -rw-r--r-- 1 root root 5 Mar 19 13:16 FirstBootFlag-ec87d643-eba4-4bb5-a1e5-3f3e36b20da9 -rw-r--r-- 1 root root 14 Mar 19 13:16 FPLayoutOrder-4db88a62-6721-47a0-9082-280b00323594 -rw-r--r-- 1 root root 5 Mar 19 13:16 FTMActiveFlag-4034591c-48ea-4cdc-864f-e7cb61cfd0f2 -rw-r--r-- 1 root root 12 Mar 19 13:16 HiiDB-1b838190-4625-4ead-abc9-cd5e6af18fe0 -rw-r--r-- 1 root root 3577 Mar 19 13:16 KEK-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 3577 Mar 19 13:16 KEKDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 8 Mar 19 13:16 Kernel_ATPSiStatus-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 8 Mar 19 13:16 Kernel_EntRevokeSiStatus-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 8 Mar 19 13:16 Kernel_RvkSiStatus-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 8 Mar 19 13:16 Kernel_SiStatus-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 8 Mar 19 13:16 Kernel_SkuSiStatus-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 8 Mar 19 13:16 Kernel_WinSiStatus-77fa9abd-0359-4d32-bd60-28f4e78f784b -rw-r--r-- 1 root root 78 Mar 19 13:16 LoaderDevicePartUUID-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f -rw-r--r-- 1 root root 26 Mar 19 13:16 LoaderInfo-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f -rw------- 1 root root 516 Mar 19 13:16 LoaderSystemToken-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f -rw-r--r-- 1 root root 6 Mar 19 13:16 MaximumTableSize-4b3082a3-80c6-4d7e-9cd0-583917265df1 -rw-r--r-- 1 root root 1858 Mar 19 13:16 MemoryConfig0-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 1736 Mar 19 13:16 MemoryConfig1-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 244 Mar 19 13:16 MemoryConfig2-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 1620 Mar 19 13:16 MemoryConfig3-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 1784 Mar 19 13:16 MemoryConfig4-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 298 Mar 19 13:16 MemoryConfig5-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 229 Mar 19 13:16 MemoryConfig6-80dbd530-b74c-4f11-8c03-418665532831 -rw-r--r-- 1 root root 5 Mar 19 13:16 MemoryOverwriteRequestControl-e20939be-32d4-41be-a150-897f85d49829 -rw-r--r-- 1 root root 5 Mar 19 13:16 MemoryOverwriteRequestControlLock-bb983ccf-151d-40e1-a07b-4a17be168292 -rw-r--r-- 1 root root 8 Mar 19 13:16 MonotonicCounter-01368881-c4ad-4b1d-b631-d57a8ec8db6b -rw-r--r-- 1 root root 280 Mar 19 13:16 MyFav-4034591c-48ea-4cdc-864f-e7cb61cfd0f2 -rw-r--r-- 1 root root 6 Mar 19 13:16 NVRAM_Verify-15a9dd61-e4f8-4a99-80db-353b13d76490 -rw-r--r-- 1 root root 32 Mar 19 13:16 OCMR_CPU_FACTORY_RATIO_NAME-a3a3b874-7636-4182-ba1e-f52c584494e3 -rw-r--r-- 1 root root 12 Mar 19 13:16 OsIndications-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 12 Mar 19 13:16 OsIndicationsSupported-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 890 Mar 19 13:16 PK-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 890 Mar 19 13:16 PKDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 10 Mar 19 13:16 PlatformLang-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 57 Mar 19 13:16 PlatformLangCodes-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 12 Mar 19 13:16 RsdpAddr-ec87d643-eba4-4bb5-a1e5-3f3e36b20da9 -rw-r--r-- 1 root root 5 Mar 19 13:16 RstOptaneConfig-4da4f952-2516-4d06-8975-65036403a8c7 -rw-r--r-- 1 root root 5 Mar 19 13:16 SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 6 Mar 19 13:16 SetupAPMFeatures-ec87d643-eba4-4bb5-a1e5-3f3e36b20da9 -rw-r--r-- 1 root root 8 Mar 19 13:16 SetUpdateCountVar-81c76078-bfde-4368-9790-570914c01a65 -rw-r--r-- 1 root root 20 Mar 19 13:16 SetupHWMFeatures-69fc7103-285c-4d8b-9a08-7b53ef90765c -rw-r--r-- 1 root root 5 Mar 19 13:16 SetupMode-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 148 Mar 19 13:16 SignatureSupport-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 12 Mar 19 13:16 SmbiosEntryPointTable-4b3082a3-80c6-4d7e-9cd0-583917265df1 -rw-r--r-- 1 root root 12 Mar 19 13:16 SmbiosEntryPointTableF000-4b3082a3-80c6-4d7e-9cd0-583917265df1 -rw-r--r-- 1 root root 12 Mar 19 13:16 SmbiosScratchBuffer-4b3082a3-80c6-4d7e-9cd0-583917265df1 -rw-r--r-- 1 root root 12 Mar 19 13:16 SmbiosV3EntryPointTable-4b3082a3-80c6-4d7e-9cd0-583917265df1 -rw-r--r-- 1 root root 12 Mar 19 13:16 TbtHRStatusVar-ba1d893b-803e-4b26-a3de-585703ff7bd6 -rw-r--r-- 1 root root 6 Mar 19 13:16 Timeout-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 10 Mar 19 13:16 TPMPERBIOSFLAGS-7d3dceee-cbce-4ea7-8709-6e552f1edbde -rw-r--r-- 1 root root 12 Mar 19 13:16 TpmServFlags-7d3dceee-cbce-4ea7-8709-6e552f1edbde -rw-r--r-- 1 root root 5 Mar 19 13:16 VendorKeys-8be4df61-93ca-11d2-aa0d-00e098032b8c -rw-r--r-- 1 root root 8 Mar 19 13:16 WpBufAddr-cba83c4a-a5fc-48a8-b3a6-d33636166544 -rw-r--r-- 1 root root 68 Mar 19 13:16 WriteOnceStatus-4b3082a3-80c6-4d7e-9cd0-583917265df1 [jhenderson@TheEarth ~]$ -- Jim Henderson Please keep on-topic replies on the list so everyone benefits