beenull/linux-surface
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Add instructions to copy the initram for signed kernel

Browse source 
We need an initram to boot the system, but the instructions for signing
the kernel did not include to copy an existing one for the signed
kernel. This commit adds these instructions. See discussion of #261 for
more info.
This commit is contained in:
Jan Niklas Richter 2018-10-31 15:50:39 +01:00
parent f72425b324
commit 56a2aa5d16
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
SIGNING.md
View file

@ -82,14 +82,20 @@ sudo mokutil --list-enrolled
sudo sbsign --key MOK.priv --cert MOK.pem /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface --output /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface.signed
```
8. Update your grub-config
8. Copy the initram of the unsigned kernel, so we also have an initram for the signed one.
```
sudo cp /boot/initrd.img-[KERNEL-VERSION]-surface-linux-surface{,.signed}
```
9. Update your grub-config
```
sudo update-grub
```
9. Reboot your system and select signed kernel. If booting works, you can remove the unsigned kernel:
10. Reboot your system and select the signed kernel. If booting works, you can remove the unsigned kernel:
```
sudo mv /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface{.signed,}
sudo mv /boot/initrd.img-[KERNEL-VERSION]-surface-linux-surface{.signed,}
sudo update-grub
```