3 ms·
I conjecture the securely booted kernel won't load unsigned modules, and out-of-tree drivers don't get signed when the kernel and its modules do.
by remexre 5y ago
I conjecture the securely booted kernel won't load unsigned modules, and out-of-tree drivers don't get signed when the kernel and its modules do.
- heavyset_go 5y agoYou can work around this[1]. [1] https://askubuntu.com/questions/1023036/how-to-install-nvidia-driver-with-secure-boot-enabled/1049479#1049479 https://askubuntu.com/questions/1023036/how-to-install-nvidi...
- josephcsible 5y agoI wish people understood the Secure Boot spec better. This problem is totally unnecessary. The spec says no unsigned code can run until ExitBootServices is called, but people treat it as if it said that no unsigned kernel code can ever run.