Brecently ran into this realization with @j0rge that we don't actually sign upstream provided modules in our kernel-cache, only the kernel (
vmlinuz binary)...Bi noticed some helpful info in Debian's wiki... with this nice example https://wiki.debian.org/SecureBoot#Manually_signing_kernels_and_kernel_modules
BI walked through that on a Debian system to make sure I had no surprises and it works well
Bso now I want to consider applying this to akmods
BTL;DR - if I succeed, this will enable secureboot for Bluefin LTS HWE and a potential uCore with LTS kernel (assuming the installation of our ublue MOK)
DThats awesome, good find!
JThis is awesome. Love linux, there's always someone nerdier than you who attempted and maybe succeeded at what you're trying to do
Bi've made progress... i have the modules being signed, but i'm running into problems with the rpmrebuild of the kernel-modules* RPMs
