Hi, just some feedback from me.
(Fresh user on here AND Fedora)
After a lot of strugling with the “Universal Blue” network installer in SecureBoot via Ventoy, which needed the TPM to be disabled:
- Completely unable to start the installer via.Ventoy, I had to write the uBlue iso to an USB stick and boot off of that.
- I choose the Kionite with latest nVidia drivers, which at last installed.
(You guys really need a progress bar that shows progress while downloading ) - I completed the install with the reboots for the MOK enrolment successfully.
- And now comes the BUG…
The nVidia drivers were REJECTED due to missing keys in the MOK…
I checked the enrolled keys and noticed 2 new keys, BOTH of these keys were added as a single MOK enrollment:
- The key for akmods.
- Some key with just numbers as CN.
So with some knowledge from my past reading on the subject, i thought Hell why not check the key on the running system:
sudo mokutil --test-key /etc/pki/akmods/certs/akmods-ublue.der
Which revealed that it was NOT enrolled, so it must be a different one as the one enrolled by the installer.
So out of curiosity i enrolled the above key using:
sudo mokutil --import /etc/pki/akmods/certs/akmods-ublue.der
And what ya guess, after a reboot to complete the enrollment, the nVidia driver was accepted…
Although I see the below errors, a few times, in dmesg
output:
[drm:nv_drm_atomic_commit [nvidia_drm]] *ERROR* [nvidia-drm] [GPU ID 0x00000100] Failed to apply atomic modeset. Error code: -22
[drm:nv_drm_atomic_commit [nvidia_drm]] *ERROR* [nvidia-drm] [GPU ID 0x00000100] Flip event timeout on head 0
These get repeated when the screensaver kicks in and the user returns to the display…