Bug#1108278: shim-signed: Asks to disable EFI Secure Boot with enrolled DKMS key
On Mon, Jul 07, 2025 at 05:52:45PM -0400, Jesse Rhodes wrote:
>If update-secureboot-policy can query mokutil to check if secure boot is
>enabled, then it can also query mokutil to check if the key from
>/var/lib/dkms/mok.pub is enrolled. This popup should never appear on a system
>with secure boot configured correctly with dkms.
Nod, that's exactly the logic needed. Just testing code to do that now.
--
Steve McIntyre, Cambridge, UK. steve@einval.com
Armed with "Valor": "Centurion" represents quality of Discipline,
Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
concord the digital world while feeling safe and proud.
Reply to: