The officially official Devuan Forum!

chomwitt

Member

Registered: 2019-09-24

Posts: 171  

Help with signing nvidia's driver with secure boot enabled

Release: Daedalus 5 (debian bookwarm 12)

@ devuan wiki / nvidia gpus

@Debian Secure Boot: To be, or not to be, that is the question!  . Nov 29, 2024  by Anna. A detailed view on signing nvidia drivers in bookwarm.

@ debian wiki / NvidiaGraphicsDrivers.

@ deb / nvidia-driver / bugs

related workflows : Display current status of gpu accelaration. If nvidia-driver is not installed Daedalus rollbacks in using software rasterizer . Lower analysis and in order of ten more slow.

Current understanding : deb package nvidia-kernel will try to build the driver and sign it. But with secure boot enabled those keys created during that process must be 'rolled'. A process that i understand to mean that those keys must get known by the UEFI in order to allow during boot the nvidia driver to load. That process doesnt proceed in Daedalus.

$ mokutil --sb-state
SecureBoot enabled

$ sudo apt install nvidia-driver firmware-misc-nonfree

$ ls /var/lib/dkms/
mok.key  mok.pub

$ sudo mokutil --import /var/lib/dkms/mok.pub 
[sudo] password for chomwitt: 
input password: 
input password again: 
Failed to enroll new keys

A related issue during nvidia-driver installation :

$ sudo apt install nvidia-driver firmware-misc-nonfree
 Processing triggers for initramfs-tools (0.142+deb12u3) ...
update-initramfs: Generating /boot/initrd.img-6.1.0-33-amd64
Errors were encountered while processing:
 nvidia-persistenced
E: Sub-process /usr/bin/dpkg returned an error code (1)
...

$ dpkg -l nvidia-persistenced 
iF  nvidia-persistenced 535.171.04-1~deb12u1 amd64        daemon to maintain persistent software state in the NVIDIA driver

/var/log/syslog during nvidia-driver installation:

2025-07-07T15:17:03.921569+03:00 enousold nvidia-persistenced: Started (10510)
2025-07-07T15:17:03.921732+03:00 enousold nvidia-persistenced: Failed to open libnvidia-cfg.so.1: libnvidia-cfg.so.1: cannot open shared object file: No such file or directory
2025-07-07T15:17:03.921749+03:00 enousold nvidia-persistenced: Shutdown (10510)

But libnvidia-cfg1 is pulled by nvidia-driver and contains

/usr/lib/x86_64-linux-gnu/nvidia/current/libnvidia-cfg.so.535.247.01
/usr/lib/x86_64-linux-gnu/nvidia/current/libnvidia-cfg.so.1

Last edited by chomwitt (Yesterday 12:46:57)

---

Devuan(Chimaera)(Daedalus)  DS+WM: XorgX11server+StumpVM