Key was rejected by service :sob:

[RENANZG]

Key was rejected by service :sob:

[adrelanos]

Nowadays (as of Debian bookworm) this was simplified a lot. All that is not automated yet is documented in DKMS readme here:
https://github.com/dell/dkms?tab=readme-ov-file#secure-boot

[evelikov]

I'm not sure I follow - are you saying that a) dkms signing does not work, b) the above outlined process does not work or c) both do not work?

Personally I don't use signed modules nor Debian, so if you have a solution making that a PR would be great. All the relevant code is in the prepare_signing() function. Thanks in advance

[RENANZG]

a) The toolset, notably shim, mokutil, dkms, opensll; that comes in distros, not only in Debian, as there are reports that Ubuntu and Fedora seem to be poorly implemented in relation to the linux kernel.

b) The above outlined process does not work and is there a history of bugs with DKMS or is it with the other packages? Or with packages confusion?

c) I'm trying to come up with a synthesis. It seems that I have reached an interesting point that involves system security, but I don't have the technical capacity to deal with it. I'm just an end user.

[evelikov]

Since I don't use Debian I cannot really assist. I would suggest reaching out to the Debian developers via their bug tracker, IRC and otherwise.

If you have a specific guide, script or other reference that works - even if you cannot provide patches for dkms - please link them. We'll try to review and integrate as time permits.

Thanks