Comment on Anon tries running live USB Linux on his dad's computer

• elvith@feddit.org ⁨5⁩ ⁨weeks⁩ ago

  Set bios to disable secure boot (warning check if you have bitlocker active before you do that) and install Linux w/o secure boot.

  Otherwise, with secureboot: akmod will generate a new key for you and prepare it to be loaded into you UEFI. That key is password protected, which was the password you were asked for. Depending on your distro it might even get loaded automatically on reboot (just follow the menu and enter the password when asked) or you might need to initiate the load with mokutil and a reboot.

  Afterwards, akmods will make sure your graphics driver is signed with the corresponding key that is now known and trusted by the UEFI and you can boot with secure boot enabled while still using self compiled kernel modules.

  Problem is that kernel modules are seen as part of the kernel and everything must be signed with a key your UEFI trusts when using secure boot. And initially it’s Microsoft’s key, which you will not have access to when using custom kernels/kernel modules/… so you just create your own.

  source