With a bootloader signed using Microsoft keys, or a bootloader that needs a MOK to be set up to install third-party keys in the Secure Boot database?
I did the latter and it was a pretty annoying process that would scare away beginners—hence me saying a “workaround” was possible. I’m not using a common distro like Fedora or Ubuntu, though. Is setting it up less painful on those?
I’m using Fedora. Works out of the box. You need to add a MOK if you want to use custom kernel modules (or the current Nvidia drivers). But using the nouveau driver or just a standard installation of not using Nvidia hardware works flawlessly without MOK.
Im using Nvidia. The initial import of the MOK is a bit… strange or scary for non tech people, but afterwards, akmods makes it a breeze. You don’t have to think about it. With Fedora 42, akmods regularly failed to build the driver’s and I had to restart the build manually after a kernel upgrade, but since I upgraded to Fedora 43, it just works.
With a bootloader signed using Microsoft keys, or a bootloader that needs a MOK to be set up to install third-party keys in the Secure Boot database?
I did the latter and it was a pretty annoying process that would scare away beginners—hence me saying a “workaround” was possible. I’m not using a common distro like Fedora or Ubuntu, though. Is setting it up less painful on those?
I’m using Fedora. Works out of the box. You need to add a MOK if you want to use custom kernel modules (or the current Nvidia drivers). But using the nouveau driver or just a standard installation of not using Nvidia hardware works flawlessly without MOK.
Im using Nvidia. The initial import of the MOK is a bit… strange or scary for non tech people, but afterwards, akmods makes it a breeze. You don’t have to think about it. With Fedora 42, akmods regularly failed to build the driver’s and I had to restart the build manually after a kernel upgrade, but since I upgraded to Fedora 43, it just works.