search

lcp / mokutil

The utility to manipulate machine owner keys
GNU General Public License v3.0
70 stars 38 forks source link

Entrolled/Signed Nvidia Driver Not Working #61

Open TheFloatingBrain opened 1 year ago

TheFloatingBrain commented 1 year ago

I have shim installed I have Secure Boot working and I enrolled my Nvidia driver successfully using mokutil, if I try to enroll Nvidia.der (my key) again with mokutil --import, it tells me that the key is already enrolled and it is going to skip booting into Mok Util screen upon reboot. I tried deleting it and re-enrolling it, and it made no difference.

So the driver is enrolled (and a signed install has been performed e.g sudo sh ./XXXXXX.run -s --module-signing-secret-key=PATH_TO_PRIVATE_KEY --module-signing-public-key=PATH_TO_PUBLIC_KEY). However the Nvidia driver is still not loading (as evident by running nvidia-smi and it telling me it could not connect to the Nvidia driver).

I have tried re-installing it several times, and lsmod | grep nouveau shows nothing (common suggestion)

At one point it did stop showing the message in Mok Util, but nothing changed when I enrolled again, I even tried re-enrolling the hash of my kernel

I also tried using kmodsign for all the Nvidia .ko files

Could this be a bug with mokutil?

lcp commented 1 year ago

Could you check the kernel dmesg and see if there is any message about nvidia.ko? Mokutil just enrolls the public key, and it's the kernel to decide whether the module should be loaded.