https://old.reddit.com/r/debian/comment ... e/h6pwjo5/
"Edit /etc/dkms/framework.conf and enable the sign_tool option.
Then follow https://wiki.debian.org/SecureBoot#MOK_ ... _Owner_Key to create the necessary keys and to enroll them into the firmware.
Then either edit /etc/dkms/sign_helper.sh to point to the correct paths to your keys or put the keys into the paths already in there."
cat /etc/dkms/framework.conf
Code: Alles auswählen
## Script to sign modules during build, script is called with kernel version
## and module name
sign_tool="/etc/dkms/sign_helper.sh"
Code: Alles auswählen
#!/bin/sh
/lib/modules/"$1"/build/scripts/sign-file sha256 /root/MOK.priv /root/MOK.der "$2"