Script to help sign out of tree kernel modules on a fedora system, but likely easily ported to other systems.
Fuzzy finder (fzf) is used to allow user to select from any of the install kernel versions on the system. This is useful to select a new kernel after a dnf upgrade.
dnf install fzf
- Run setup to generate MOK key
setup_mok_keys.sh - Enroll Mok key. To finish the import a reboot is required. UEFI will ask for a password at boot time. Once the import has finished you can sign and load kernel modules at runtime.
- Sign kernel modules
./sign_fedora.sh