yeah, run that `mokutil...` command which prompts them to set an import password, reboot, get the cr

yeah, run that

mokutil...

mokutil...

mokutil...

mokutil... command which prompts them to set an import password, reboot, get the crazy blue MOK screeen...

"Enroll a key" ... give the import password... reboot... good.

Then the new signed modules should be good.

bshermanOP•5/17/23, 7:41 PM

oh geeze

j0rge•5/17/23, 7:42 PM

ok so we don't need to do this then? https://github.com/ublue-os/nvidia/issues/100#issuecomment-1551658197

GitHub

migrate akmod keys from repo to org level · Issue #100 · ublue-os/n...

We need to migrate AKMOD_PRIVKEY and AKMOD_PUBKEY to be org-level secrets rather than nvidia repo level. Reason: we plan to use the same single key for akmods signing of both our current nvidia akm...

bshermanOP•5/17/23, 7:42 PM

paranoid me wants to test signing with this key to make sure it really, really works, but it should

j0rge•5/17/23, 7:42 PM

we can wait a day to get it right, no problemo

Jj0rge ok so we don't need to do this then? https://github.com/ublue-os/nvidia/issues/1...

bshermanOP•5/17/23, 7:43 PM

this comment by @Arcitec is how to recover if a user failed to enroll the key before cutover and has an nvidia-only system,...

j0rge•5/17/23, 7:43 PM

ok so we are NOT asking people to do that

j0rge•5/17/23, 7:44 PM

I am confused on what commands need to be run because yours is a oneline and this one is painful

Jj0rge ok so we are NOT asking people to do that

bshermanOP•5/17/23, 7:44 PM

nope, just need to have it as "what if my secure boot nvidia machine boots to black screen"

j0rge•5/17/23, 7:44 PM

ok so his steps are "if all that got messed up"

j0rge•5/17/23, 7:44 PM

ok so I see three next steps, lmk if this is right and I'll add it

j0rge•5/17/23, 7:44 PM

1) test signing with the new key

j0rge•5/17/23, 7:45 PM

2) add instructions for the 1 liner

j0rge•5/17/23, 7:45 PM

3) add instructions for the big failure part where they undo stuff in the bios

Jj0rge 2) add instructions for the 1 liner

bshermanOP•5/17/23, 7:45 PM

we bascially have the instructions with screenshots in the ISO installer part of website, i think, so that's helpful

j0rge•5/17/23, 7:45 PM

I'll start with those three items

Jj0rge 3) add instructions for the big failure part where they undo stuff in the bios

bshermanOP•5/17/23, 7:46 PM

this is probably good to have in general for nvidia users FAQ

"what if my secure boot nvidia machine boots to black screen?"

bshermanOP•5/17/23, 7:46 PM

thanks! i really gotta unplug

dreamyuki•5/17/23, 9:08 PM

i have weird issue after rebasing to kinoite-main:latest from kinoite-nvidia:latest

dreamyuki•5/17/23, 9:10 PM

dreamyuki•5/17/23, 9:11 PM

it still have justfile from kinoite-nvidia

Ddreamyuki it still have justfile from kinoite-nvidia

bshermanOP•5/17/23, 10:10 PM

Yes the new ublue-os-just RPM provides nvidia.justnvidia.just on all images, but the profile shell script only includes it if you are running ublue nvidia derivative images

j0rge•5/18/23, 12:35 AM

yeah when just gets includes in a stable release we'll be able to just include one in the other and that will let us have unified stuff but also the ability to customize and then it'd be really well organized compared to what we have today

j0rge•5/18/23, 12:18 PM

https://github.com/ublue-os/nvidia#nvidia

GitHub

GitHub - ublue-os/nvidia: Fedora variants with built-in Nvidia drivers

Fedora variants with built-in Nvidia drivers. Contribute to ublue-os/nvidia development by creating an account on GitHub.

j0rge•5/18/23, 12:18 PM

@bsherman @Arcitec README ready to go? I PRed the markdown syntax fix just now

j0rge•5/18/23, 12:29 PM

@akdev huh, this just happened: https://github.com/ublue-os/main/issues/132

GitHub

Plasma Discover invalid reference for OCI when installed using the ...

What happened? When using the iso to install ublue a rpm-ostree-backend error occurs mentioning invalid reference for OCI container ostree format. Relevant log output $ plasma-discover rpm-ostree-b...

j0rge•5/18/23, 12:29 PM

I can't even find a usage of ostree-unverified-imageostree-unverified-image anywhere in the org (new github code search rocks btw), so I'm wondering how this can be cropping up

Jj0rge I can't even find a usage of `ostree-unverified-image` anywhere in the org (new ...

ChaiQi•5/18/23, 2:08 PM

New?

Jj0rge @akdev huh, this just happened: https://github.com/ublue-os/main/issues/132

akdev•5/18/23, 2:17 PM

huh easiest way to confirm would to be mount to iso and search there

akdev•5/18/23, 2:18 PM

you can use github.dev to search in the codebase itself, I've found github code search to not be good with partial searches

akdev•5/18/23, 2:41 PM

ostree-unverified-registry:quay.io/exampleos/custom:latest - this will pull from a remote registry, and no signature will be required. In practice, this is just a shorthand for ostree-unverified-image:docker://quay.io/exampleos/custom:latest.

Jj0rge @bsherman @Arcitec README ready to go? I PRed the markdown syntax fix just now

bshermanOP•5/18/23, 4:40 PM

new akmods key testing results in https://github.com/ublue-os/nvidia/issues/100

Aakdev > ostree-unverified-registry:quay.io/exampleos/custom:latest - this will pull fr...

j0rge•5/18/23, 5:57 PM

found it, it's the iso

j0rge•5/18/23, 5:57 PM

if you if install from the iso and pick kinoite you get ostree-unverified-image and not registry

Jj0rge if you if install from the iso and pick kinoite you get ostree-unverified-image ...

bshermanOP•5/18/23, 6:30 PM

did you find where? i'm looking now

j0rge•5/18/23, 6:32 PM

that was my next question, where do I look?

Jj0rge that was my next question, where do I look?

bshermanOP•5/18/23, 6:40 PM

yeah, i'm confused, too

main

main

's "release-please" workflow is what builds an ISO

but it uses the isogeneratorisogenerator

and i don't see docker:docker: anywhere in isogenerator code (local git checkout grep) and only one not-related occurance in