Originally posted by erniv2
View Post
But nothing of those things has anything to do with your original point.
Your original post sounded like you accused the "NIH fanatics in the linux comunity" (your words and spelling errors, not mine) for being the ones blocking your SecureBoot by having the nvidia module tainting the kernel.
Which has nothing to do with each other at all.
And all your remarks up until now just goes to show that you have *NO IDEA* what you are talking about, and only want to bash someone, and do not even want to know what goes wrong so you at least blame the correct persons/systems and for the right reason.
SecureBoot *REQUIRES* all parts of the boot-chain and the kernel to be signed by *keys* marked as trusted (not all modules needs the same key as the kernel, just that the module needs to be signed and the key enrolled into the boot-chain as trusted).
The same is true for windows. You cannot load a driver into windows that is not signed by Microsoft unless you disable SecureBoot.
And all Out Of Tree drivers *DO* need to be re-compiled to match the current installed kernel ABI.
Your system probably do that automatically with the help of akmods and dkms when you yum install/apt-get install them and on every kernel upgrade after that.
Yes, enrolling a key for akmods/dkms recompilations of Out Of Tree kernel modules is a bit circumstantial.
And when it comes to Fedora, this is the current instructions on how to enroll a key and make akmods automatically sign modules it has built with it are maybe not the lightest read, but it is pretty easy:
This is new since Fedora36, so that is why your google-fu might not show it for you. But I have only had to set it up once per computer that needs it and have not had any reason touching it since then.
But it is your choice to buy or use anything that requires an Out Of Tree driver, and as such it is you who have chosen these problems.
And If you do not even want to try understand these basic things, then please just shut up. You have nothing to offer except gravely wrong comments and baseless accusations based in just ignorance.
Comment