signing for secure-boot with preexisting keys

nightflight-dk · Jul 17, 2024 · cdd70ba · cdd70ba
1 parent 43a68da
commit cdd70ba
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -3,3 +3,4 @@
 *.o.cmd
 *.o.d
 _out/
+MOK.*
diff --git a/sign_modules.sh b/sign_modules.sh
@@ -0,0 +1,8 @@
+# assumes MOK.priv and MOK.der in the same folder, enrolled to secure-boot
+
+for module in /lib/modules/$(uname -r)/kernel/drivers/video/nvidia*.ko
+do
+  echo "Signing ${module}..."
+  sudo kmodsign sha512 MOK.priv MOK.der "$module" >> sign_results.out
+done
+