Le 01/01/2020 à 13:59, l0f4r0@tuta.io a écrit :
1 janv. 2020 à 10:36 de didier.gaumet@gmail.com:SecureBoot has its own limitations and perhaps your use case is covered here: https://wiki.debian.org/SecureBoot#Secure_Boot_limitations for example, I cannot use SecureBoot on my recent laptop due to my Realtek RTL8821ce wireless card, for which there is a driver that is out out of the linux kernel tree. So I have to build a DKMS module that forbids use of SecureBoot (I could sign my own module to use SB, though) ...
(...)
I understand that when you go Debian off-road (i.e install some specific packages/drivers for your unsupported hardware), you don't comply with Secure Boot out-of-the-box anymore. However, is it normal that I cannot boot my Debian as soon as I installed it?
No. This was only an irrelevant example. Secure boot does not prevent booting when an unsigned kernel module is present, it would only prevent loading such module.