virtual appliance Securing Grub boot loader enforces password prompt every reboot

Products

• CA API Gateway

Issue/Introduction

After following the documented steps on debian to secure the grub boot loader with a password every reboot requires a login and console access which is problematic.

https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/11-0/install-configure-upgrade/configure-the-appliance-gateway/secure-the-grub-boot-loader.html

 

Environment

CA API Gateway: 11.0

Resolution

It is possible to allow reboot to not prompt for password by using the following work around:

Backup file /etc/grub.d/10_linux
# cp /etc/grub.d/10_linux /tmp/grub.10_linux_backup

Modify the /etc/grub.d/10_linux
add the --unrestricted option to line 144 (Consult screenshot).

Reference line as can be seen in screenshot:
echo "menuentry '$(echo "$os" | grub_quote)' --unrestricted ${CLASS} \$menuentry_id_option 'gnulinux-simple-$boot_device_id' {" | sed "s/^/$submenu_indentation/"

After this reboot should occur without enforcing a login. But entering into grub menu should require the user and password.