Messinet Secure Services

Messinet Secure Services is an ever-changing virtual classroom in which I learn about the GNU/Linux platform and all the services it can deliver. These services are the technological incarnation of an idea centered around keeping my family in touch with each other and technology.

Fedora 18, UEFI secure boot & kernel module signing∞

2013-02-08 Anthony Messina

rpm
- dahdi
- fedora
- kernel
- linux
- rpm

Beginning with Fedora 18’s implementation of UEFI Secure Boot (Fedora references: EFI, Secure Boot), Messinet Secure Services has begun to build signed kernel module binaries for packages such as dadhi-linux-kmod.

For UEFI Secure Boot enabled systems to be able to load these kernel modules, the Messinet Secure Services kernel module signing key must be installed into the system’s database of trusted certificates using a utility such as mokutil.

See the Fedora & Enterprise Linux RPM Repository for more information.

The ability to begin building signed third party kernel modules is based in large part on Josh Boyer’s excellent work on the upstream Fedora kernel build process and his spec file documentation along the way. Thanks, Josh.