Talk:Signed kernel modules

Reason for fork

Very few changes were made to Gene's original scripts (except adding zstd & gzip module support)

• the new 'abk' helper in arch-sign-modules^AUR adds functionality & does not fix problems - hence the fork.

--Itoffshore (talk) 14:45, 6 September 2021 (UTC)

collaboration

Recent collaboration with Gene has resulted in my small changes for zstd & gzip being merged + new functionality for wildcards in configuration paths being added. The required PKGBUILD configuration is a lot more universal now which allows a build to be reduced to 3 commands with manual configuration no longer being needed for the kernels I track. I now re-use Gene's certs-local without change. The 'abk' helper is still separate as we build different kernels. Itoffshore (talk) 15:14, 5 May 2022 (UTC)

Signing dkms modules

According to the readme of dell/dkms, the dkms should take over signing job automatically. All you need to do is enrolling the MOK key generated by dkms to your UEFI to let kernel load dkms modules with SecureBoot enabled. ZhangHua (talk) 05:23, 23 December 2023 (UTC)