On Fri, Mar 03, 2023 at 08:11:42PM -0600, Tejas Guruswamy wrote:
On 02/03/2023 01:22, Jiri Slaby wrote:
Hi all,
just so you know, as per bug 1198101, the kernel for Tumbleweed received patchset for locked down kernel (see the bug). This will be a part of the 6.2.1 submission (SR#1068171).
Few notes: * Hibernation does not work when secure boot is enabled (bug 1208766) * Leap inherited/contains this patchset long from SLE time ago.
regards,
This needed a lot more warning; Tumbleweed does not have signed NVIDIA kernel modules at the moment, only Leap. There are going to be a lot of people with broken displays.
Highlighting for Stefan (sorry, looks like you are going to have some bug reports ...)
Thanks for letting me know! Yeah, it's the first time I hear about this. :-( Adjusting the packages will be rather easy. Basically this means that TW users making use of the proprietary nvidia kernel modules will need to accept a new MOK key after rebooting the machine when having done a kernel update before via a regular TW update, because we don't provide a stable kABI with TW. Personally I expect users to taboo (zypper lock) the kernel packages to get rid of this step. Many TW users may have never seen our MokManager before ... https://en.opensuse.org/SDB:NVIDIA_drivers#Secureboot OTOH this change may motivate some users with Turing/Ampere GPU (2018 and newer) to give nvidia's openGPU kernel modules a try, which we ship with TW lately and are secureboot-signed with the openSUSE key. https://sndirsch.github.io/nvidia/2022/06/07/nvidia-opengpu.html CU, Stefan Public Key available ------------------------------------------------------ Stefan Dirsch (Res. & Dev.) SUSE Software Solutions Germany GmbH Tel: 0911-740 53 0 Frankenstraße 146 FAX: 0911-740 53 479 D-90461 Nürnberg http://www.suse.de Germany ---------------------------------------------------------------- Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman (HRB 36809, AG Nürnberg) ----------------------------------------------------------------