{"action":"created","issue":{"url":"https://api.github.com/repos/Bumblebee-Project/Bumblebee/issues/692","labels_url":"https://api.github.com/repos/Bumblebee-Project/Bumblebee/issues/692/labels{/name}","comments_url":"https://api.github.com/repos/Bumblebee-Project/Bumblebee/issues/692/comments","events_url":"https://api.github.com/repos/Bumblebee-Project/Bumblebee/issues/692/events","html_url":"https://github.com/Bumblebee-Project/Bumblebee/issues/692","id":112396537,"number":692,"title":"Driver signing","user":{"login":"fduraibi","id":432460,"avatar_url":"https://avatars.githubusercontent.com/u/432460?v=3","gravatar_id":"","url":"https://api.github.com/users/fduraibi","html_url":"https://github.com/fduraibi","followers_url":"https://api.github.com/users/fduraibi/followers","following_url":"https://api.github.com/users/fduraibi/following{/other_user}","gists_url":"https://api.github.com/users/fduraibi/gists{/gist_id}","starred_url":"https://api.github.com/users/fduraibi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fduraibi/subscriptions","organizations_url":"https://api.github.com/users/fduraibi/orgs","repos_url":"https://api.github.com/users/fduraibi/repos","events_url":"https://api.github.com/users/fduraibi/events{/privacy}","received_events_url":"https://api.github.com/users/fduraibi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":19,"created_at":"2015-10-20T15:36:23Z","updated_at":"2015-10-25T22:46:19Z","closed_at":null,"body":"I have a laptop with secure boot enabled, everything under my Fedora 22 run fine except for Bumblebee with nvidia native drivers since the drivers need to be signed.\r\nAfter every update of Bumblebee packages I need to modify \"/usr/sbin/bumblebee-nvidia\" and update the nvidia-installer part with the parameters for key signing to allow it to sign the new drivers.\r\n\r\nThe modification is simple, i need to add this only: \"--module-signing-secret-key=/etc/kernel-keys/private_key.priv --module-signing-public-key=/etc/kernel-keys/public_key.der\" but it is annoying to do manually every time\r\n\r\nSo it would be great if i can set these in the bumblebee config file and the driver installer will include these when they are enabled.\r\n\r\n* I also need to sign bbswitch.ko, but I managed that by a script under \"/etc/kernel/postinst.d/\" which signs the driver after every new kernel. However, for nvidia drivers the installer will delete the compiled drivers if they failed to start."},"comment":{"url":"https://api.github.com/repos/Bumblebee-Project/Bumblebee/issues/comments/150981144","html_url":"https://github.com/Bumblebee-Project/Bumblebee/issues/692#issuecomment-150981144","issue_url":"https://api.github.com/repos/Bumblebee-Project/Bumblebee/issues/692","id":150981144,"user":{"login":"gsgatlin","id":1095679,"avatar_url":"https://avatars.githubusercontent.com/u/1095679?v=3","gravatar_id":"","url":"https://api.github.com/users/gsgatlin","html_url":"https://github.com/gsgatlin","followers_url":"https://api.github.com/users/gsgatlin/followers","following_url":"https://api.github.com/users/gsgatlin/following{/other_user}","gists_url":"https://api.github.com/users/gsgatlin/gists{/gist_id}","starred_url":"https://api.github.com/users/gsgatlin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gsgatlin/subscriptions","organizations_url":"https://api.github.com/users/gsgatlin/orgs","repos_url":"https://api.github.com/users/gsgatlin/repos","events_url":"https://api.github.com/users/gsgatlin/events{/privacy}","received_events_url":"https://api.github.com/users/gsgatlin/received_events","type":"User","site_admin":false},"created_at":"2015-10-25T22:46:19Z","updated_at":"2015-10-25T22:46:19Z","body":"Ah. Ok. I guess they must expect you to turn off secureboot for out of tree modules from http://rpmfusion.org/ then. Thanks for testing that out with virtualbox. Well, if you can figure it out I'll be happy to package up your shell script and changes to the dkms.conf. There is no rush. Cheers."}}