https://blue-build.org/ logo
silverblue-nvidia-open image not loading the Nvidi...
# questions
b
I've installed the
silverblue-nvidia-open
image on a laptop of mine with an RTX Ada workstation GPU (i.e. the Quadro kind). But when I boot it and run
lsmod
, it says the Nvidia driver is not loaded. I'm very confused about this, as I was previously running the Universal Blue
silverblue-nvidia
image without issue. * GNOME Software keeps pestering me about trying to use
akmods
to setup the driver using MOK enrollment on a reboot, but this doesn't work because it can't call
kmodgenca
. But it looks like this is just an artifact of building off of the regular Silverblue, something I don't need to worry about…right? * Running
ujust configure-nvidia
does nothing because
ujust
is not installed. Is that supposed to be the case?
g
Did you switch directly from a universal blue image? We have
blujust
and have some tasks for MOK enrollment. We sign the kernel and nvidia module, so setting that up should work.
b
I originally installed plain old Silverblue from Fedora's website, then I rebased to the BlueBuild image immediately
Is MOK enrollment still necessary though? I thought that was just needed for regular Silverblue on account of the drivers not being signed with secure boot and consequently needing user authorization to build a custom RPM to overlay
g
If you're using secure-boot, you'll have to use our key which we include in our base-images including for nvidia drivers
b
Using
blujust
fixed the problem! I hadn't realized the command had been renamed from
ujust
. 😅 Why is it required though? I thought half the point of this image was that the drivers were baked into the signed kernel so that you didn't need to enroll a new key?
g
Any kmod added to a system with secure-boot requires it to be signed and accepted by the user
So we sign the kernel and kmod for our images
b
So do you not compile the kernel with the Nvidia drivers inside? I'm sorry I don't know how kernel development works very much. Mostly I'm just curious at this point
g
We build the Nvidia kernel module, not the kernel itself. We then sign both so that anyone can use secure boot
9 Views