On Mon, 2020-01-13 at 11:48 +0100, Michael Pujos wrote:
I wanted to try newer kernels in the Kernel:/stable repo (currently 5.4.10) but booting them result in a lockup at "Kernel loading...". Not even initrd is loading. Is this due to this new singnig key handling thing I am not familiar with ? Is there anything I can do to have this working ?
The kernel in kernel:/stable does not use the same signing key as what is shipped in Tumbleweed (the proper signing key is only applied when it's in the product). So the new key can't be a reason for that problem in this case. Nevertheless, I think the signing is still an issue here: since the kernel in :/stable is not signed with the openSUSE Key (which in turn is signed by the openSUSE CA) your UEFI/Secureboot likely never enrolled the keys. IIRC, you should see a mokmanager during boot up, where you should be able to enroll a new key (or in worst case, try to disable secureboot in the UEFI setting for a test) Cheers, Dominique