Re: The lockdown function be enabled in master branch of openSUSE kernel

On 08.06.2023 07:54, joeyli via openSUSE Factory wrote:

As you see, the kernel module verification will be enabled. So please sign your self-built kernel module.

mokutil --sb-state | grep -q "SecureBoot enabled" if [ $? -eq 0 ]; then privkey=$(mktemp /tmp/MOK.priv.XXXXXX) pubkeydir=/var/lib/nvidia-pubkeys pubkey=$pubkeydir/MOK-nvidia-driver-G06-525.116.04-8.1-$flavor.der Should not NVIDIA (and any other external module) always generate and enroll certificate? Otherwise package installed when Secure Boot was temporary disabled will fail when Secure Boot gets enabled.