Add instructions to copy the initram for signed kernel
We need an initram to boot the system, but the instructions for signing the kernel did not include to copy an existing one for the signed kernel. This commit adds these instructions. See discussion of #261 for more info.
This commit is contained in:
parent
f72425b324
commit
56a2aa5d16
10
SIGNING.md
10
SIGNING.md
|
@ -82,14 +82,20 @@ sudo mokutil --list-enrolled
|
||||||
sudo sbsign --key MOK.priv --cert MOK.pem /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface --output /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface.signed
|
sudo sbsign --key MOK.priv --cert MOK.pem /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface --output /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface.signed
|
||||||
```
|
```
|
||||||
|
|
||||||
8. Update your grub-config
|
8. Copy the initram of the unsigned kernel, so we also have an initram for the signed one.
|
||||||
|
```
|
||||||
|
sudo cp /boot/initrd.img-[KERNEL-VERSION]-surface-linux-surface{,.signed}
|
||||||
|
```
|
||||||
|
|
||||||
|
9. Update your grub-config
|
||||||
```
|
```
|
||||||
sudo update-grub
|
sudo update-grub
|
||||||
```
|
```
|
||||||
|
|
||||||
9. Reboot your system and select signed kernel. If booting works, you can remove the unsigned kernel:
|
10. Reboot your system and select the signed kernel. If booting works, you can remove the unsigned kernel:
|
||||||
```
|
```
|
||||||
sudo mv /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface{.signed,}
|
sudo mv /boot/vmlinuz-[KERNEL-VERSION]-surface-linux-surface{.signed,}
|
||||||
|
sudo mv /boot/initrd.img-[KERNEL-VERSION]-surface-linux-surface{.signed,}
|
||||||
sudo update-grub
|
sudo update-grub
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue