Kaum ein Jahr später gibt es eine Lösung.
Das machen wir aber auf Englisch, die guten Tipps sind immer auf Englisch.
My Ubuntu Version is 20.04 .
My new Superlaptop wouldn't wake up from suspend.
According to this page there was a chance using this Kernel:
http://ubuntuhandbook.org/index.php/2020/08/install-linux-kernel-5-8-ubuntu/
The commands there worked for me,I installed 2x headers, modules and image.
My "Kernel String" was "5.8.12-050812-generic"
Now reboot, deaktivate Secure Boot, test wether the kernel has the feature that you need (it does)
Then activate Secure Boot again and boot into the old kernel
According to:
https://ubuntu.com/blog/how-to-sign-things-for-secure-boot
I created a MOK - Machine Owner Key
(the openssl command is quite similar to the command for creating a
webserver ssl certificate, except for the OIDs.
Remarkable that the OID for signing modules is not registered
on oid-info.com )
Imported this MOK
uninstalled shim and shim-signed
reinstalled shim and shim-signed
rebooted into shim. You have to be fast with clicking at this moment, shim
is on the screen only for a few seconds, if you miss it, you will have to
repeat the MOK-import and the shim un/reinstall
Screen looks similar to (is this an advanced version of shim ? )
https://github.com/hakuna-m/wubiuefi/wiki/MOKManager
There I installed my MOK
Afterwards I found out, that an Ubuntu CA from 2012 had been installed with
this process automatically!
Now signed the Kernel:
| /boot# sbsign --key /root/sb/MOK.priv --cert /root/sb/MOK.pem vmlinuz-5.8.12-050812-generic --output vmlinuz-5.8.12-050812-generic
Signing Unsigned original image
|
Signed the Modules: (from https://askubuntu.com/questions/770205/how-to-sign-kernel-modules-with-sign-file )
| /# time find lib/modules/5.8.12-050812-generic -iname "*.ko" -exec /usr/src/linux-headers-5.8.12-050812-generic/scripts/sign-file sha512 /root/sb/MOK.priv /root/sb/MOK.der {} \;
took about 15 seconds
|
Rebuilt initramfs:
| /boot# update-initramfs -u -k 5.8.12-050812-generic
|
That's it. Now I could boot this Kernel/modules with Secure Boot enabled, but
the mainline kernel has some stability issues (just as they told you ..)