Hi Michael, On 5/7/23 16:21, Michael Pujos wrote:
I do not know what changed but got the same modprobe failure with NVIDIA modules. As a workaround, I disabled Secure Boot in the BIOS because I do not absolutely need it.
It "appears" to me that they resolved the issues with self signed certificates which existed last time they turned on kernel lockdown, but I don't yet understand why the things I used to check to see if lockdown was enabled still say no. To use self signed modules with Secure Boot you must Create your own certificates ( using openssl ) Sign the modules with those certificates ( using the appropriate sign-file script for the kernel ) mokutil --import <your-cert>.der reboot When prompted during boot you need to Perform MOK Management Enroll MOK Enroll the key reboot mokutil --list-enrolled # should now show your key enrolled modules should have now loaded without the key error Next time there is a kernel update you can just sign the modules with your certifcate and then they should load and you don't have to do the other steps because you are using the same certificate. NOTE: I don't use Nvidia drivers but I would have expected distro to have signed them with their key Regards, Joe