-
Notifications
You must be signed in to change notification settings - Fork 81
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Nvidia problem #221
Comments
As far as I understand sbctl does not support signing of kernel modules. To disable signature check of kernel module you can set the following kernel cmdline: Under archlinux I have not been able to run secureboot with an Nvidia card. Under Debian it works because only mok is used there and the kernel are official signed archlinux not. Perhaps someone can clarify this in a short sentence. |
As far as I know nvidia kernel module has been open sourced so if the kernel module could be embedded in kernel and then made unified kernel image and signed would it then work |
This is interesting, I had no such problem. I think the kernel is not built with lockdown enabled, so unless you specify
Why not? Sign the shim, boot the shim, which launches the MOK process of validating stuff. |
That is not really the case, again the question if it signed by the same key as the one used to sign the kernel. If you build your own kernel, sign the kernel module with that, it will not be rejected. |
@jyash8 Do you mind closing the issue, if my answers were sufficient? |
It looks like Nvidia will add upstream support for the official kernel modules, so in the future you will be able to use it without any hassle, if you have the right hardware. |
I have seen many places, pc with nvidia drivers fail to boot.
Do something different needs needs to done for it or will it out of the box?
Also how to disable checks for kernel modules.
The text was updated successfully, but these errors were encountered: