https://bugzilla.suse.com/show_bug.cgi?id=1209006 https://bugzilla.suse.com/show_bug.cgi?id=1209006#c22 --- Comment #22 from Michal Suchanek <msuchanek@suse.com> --- (In reply to Joey Lee from comment #21)
For reference, kernel upstream's plan of .platform and .machine keyrings is here:
keyrings, key usage, and trust models https://lore.kernel.org/all/20220928055900.GT4909@linux-l9pv.suse/t/ #m3ce7e451f1855d9c432965bb896cb7ce0f89e009
So there are only questions, no answers. It has been pointed out that the scheme proposed by upstream is inconsistent and broken, and there has been no reply. Upstream is not willing to concern itself with distribution kernel needs, and if we want to use MOK we need to patch the kernel downstream so that using MOK is possible. -- You are receiving this mail because: You are on the CC list for the bug.