5 ms·
On some recent Lenovo laptops. I have a recent X260 running Fedora 24 and I'm very happy with it, and with Fedoras support. I use both smartcard and 4G data mo
by INTPenis 10y ago
On some recent Lenovo laptops.
I have a recent X260 running Fedora 24 and I'm very happy with it, and with Fedoras support. I use both smartcard and 4G data module with it. Only thing I don't use is the fingerprint reader.
Only sad bit is that I had to disable SecureBoot to run VirtualBox. I would have happily signed the VirtualBox kernel modules if it wasn't for Lenovo missing a small detail in the implementation of the UEFI spec that enables users to write their own MOK.
- beagle3 10y agoWait a second. Are you running Fedora24 on metal or on Virtualbox? If on metal, then how do the (unsigned) virtual box kernel modules matter? And if on virtualbox - you don't actually know if it would run on metal. VirtualBox hides quite a lot from you. (I expect that it will run on metal - I just don't think you have evidence one way or another if you are running it on vbox)
- voltagex_ 10y agoVirtualBox itself requires kernel modules to run.
- beagle3 10y agoBut Linux doesn't care and lets them run. Unless you mean those on the Windows side. In which case - why does virtualbox honor bios settings of the host machine?
- mmarx 10y ago> But Linux doesn't care and lets them run. No, it doesn't, at least on Fedora[0]: “When Secure Boot is enabled, the EFI operating system boot loaders, the Fedora kernel, and all kernel modules must be signed with a private key and authenticated with the corresponding public key.” [0] https://docs.fedoraproject.org/en-US/Fedora/24/html/System_Administrators_Guide/sect-signing-kernel-modules-for-secure-boot.html https://docs.fedoraproject.org/en-US/Fedora/24/html/System_A...
- beagle3 10y agoThanks, that's new to me.
- detaro 10y agoYou can use Secure Boot with Linux to make sure you run a signed kernel with signed kernel modules. That's what doesn't work with VirtualBox modules.
- INTPenis 10y agoI said I was running Fedora 24 on an X260, implied that it's on metal. However, I also want to run VirtualBox inside Fedora, because my job requires me to have a Windows VM. And VirtualBox has its own kernel modules, with SecureBoot they need to be signed. Unfortunately the poor UEFI implementation Lenovo has provided won't let me enter my own MOKs into the UEFI because coincidentally that little write call is missing. I dunno, tinfoil hat surgically implanted under my scalp, it feels like they're not making it easy for Linux, when the Linux community is doing their best to adapt to SecureBoot. Edit: And just to be clear, I did of course disable SecureBoot at this discovery but it was sad to do so because I had hoped to see how well Linux had adapted to this new tech that came out several years ago and was heralded as a Linux blocker. ;)
- Nux 10y agoWhy don't you use KVM/libvirt instead of Vbox?
- sangnoir 10y agoI'm not sure that would help - libvirt also has kernel modules
- cesarb 10y agoThe kvm kernel modules come with the Fedora kernel, and thus are already signed by Fedora's key. It's virtualbox which for some reason won't upstream their kernel modules, so they have to be compiled and installed by its users.
- deleted 10y ago[deleted]
- Hikikomori 10y agoSeamless mode in vbox is great.
- INTPenis 10y ago
- user198791273 10y agoHere's the bug: https://github.com/rhinstaller/shim/issues/55 https://github.com/rhinstaller/shim/issues/55 And PR: https://github.com/rhinstaller/shim/pull/60 https://github.com/rhinstaller/shim/pull/60 Hopefully $DISTRO will patch it soon so you can enroll keys. : )