Add NVIDIA graphics driver when Linux secure boot (Secure boot)

To enable secure boot, install NVIDIA graphics driver in Fedora 21.

Nvidia graphics drivers can download the latest version from official website >> Click to enter

Add executable permissions after download:

#chmod +x Nvidia-linux*.run

Note that the two conditions that are required to install an Nvidia graphics card are

1. Nouveau (the default graphics driver) driver must be disabled

2. Xserver (graphical interface) to stop running

The solutions to the above two problems are as follows:

First press CTRL + ALT + F2 Enter the terminal to enter the root account and password after you perform the following actions 1--omit-drivers nouveau/boot/initramfs-$ (uname- r). IMG $ (UNAME-R)-Force2. Stop Xserver#service GDM stop#service LIGHTGDM Stop

3. Install the required programs for compiling
#yum Install GCC Kernel-devel

Then go to the directory where you put the Nvidia-linux*.run, execute the file, and follow the instructions.

Since I have installed the driver for this machine, I will no longer execute it (so there is no).

Note that during the execution, you will be prompted whether to use dkms, because the use of dkms under secure boot will cause no power on, select No (NO).

After compiling will be prompted whether sign the kernel module (for kernel module signature), here to choose Yes. You will then continue to ask whether the module is signed or regenerated using the existing key.

Here is the option to regenerate the key. After continuing, the key generates a Nvidia*.der (private key) file and a Nvidia*.key (public key) file under/usr/share/nvidia/, and when prompted to delete the generated key file, select No,

Because these two files will be used afterwards. Continue Setup to the end of the prompt will not start the module. This is because the generated key has not yet been added to the kernel's truststore.

Add the encryption key to the kernel's trust list:

#mokutil--import/usr/share/nvidia/nvida*. Der will then prompt for a password, two times to enter the password and restart the system. #reboot重启进入bootloader之后, due to the addition of the cryptographic key operation, Shim,shim will be prompted to enter the password entered in the previous step to import the key. Follow the steps. After the key is imported, the kernel can successfully load the compiled NVIDIA graphics card driver at startup. 

After booting into the system, it can be used normally. It is important to note that because the generated key is added to the kernel's trust list, the generated private key and public key must be properly stored.

Add NVIDIA graphics driver when Linux secure boot (Secure boot)