Thanks a bunch for the advice but I can’t start my system. That’s regardless of the distro I try and install (I already overwrote Trixie with Bazzite… and now with Nobara).
I followed this tutorial :https://fostips.com/install-nvidia-driver-in-debian-13/?amp=1
I explain the situation over here in more detail if by any chance this rings a bell with you :
you done fucked up the secure boot settings I think. I am in no way qualified to help you.
I don’t even understand how you can install a different OS. Work off a live USB if you even can.
As far as I understand this is the bit you fucked up. btw, the images in the debian forum post just show “filename1.jpg” as text and don’t display. post on !/c/[email protected]
Step2: Enroll MOK keyfor Secure Boot
Debian updates its kernel (minor versions) regularly for security updates and fixes. Without re-building kernel modules every time, DKMS is used, which however needs be signed for secure boot using a machine owner key (MOK).
1. First, run the command below to check if Debian was installed with UEFI boot by running the command below in terminal:
ls /sys/firmware/efi
The command tells to list the /sys/firmware/efi directory content. If it says “No such file or directory”, then you have Debian installed as legacy boot.
2. Next, run command to check if secure boot enabled:
sudo mokutil --sb-state
If both UEFI and secure boot enabled (as the screenshot below shows you), then you need to run commands below one by one to create and enroll MOK key.
3. First, run the command below to manually generate a mok key.
sudo dkms generate_mok
Run sudo apt install dkms if the dkms command not found, andset a password for the key.
4. Next, run command to import the key:
sudo mokutil --import /var/lib/dkms/mok.pub
5. Finally, reboot your computer. At next boot, it should pop-up a screen (see the screenshot below), asking to perform MOK menagement.
There, just choose to Enroll MOK -> continue -> confirm -> enter password (you setwhen creating the key) -> reboot.
After enabled non-free repository and enrolled MOK key, you may then run the commands below to install NVIDIA driver.
First, install the kernel headers for DKMS:
sudo apt install linux-headers-$(dpkg --print-architecture)
Can’t see the images in the forum, but is the kernel actually starting? (Does it get past grub? Does it get to grub?)
From your forum post it sounds like you’re seeing a secure boot issue, which may require changing some bios settings. (Installing the non free driver definitely breaks secure boot.)
Yep, definitely secure boot. For now, you may be able to disable secure boot on your workstation or boot off of the install media and run the commands to enroll the mok key that you were given in another thread.
Thank you so much, that was it. I mean, I disabled secureboot, so now I can boot into either Bazzite or Windows, but this whole MOK key business? I’d love to know if I should try and correct it right now because it’ll come to bite me in the ass later if I don’t? What would you say?
Thanks a bunch for the advice but I can’t start my system. That’s regardless of the distro I try and install (I already overwrote Trixie with Bazzite… and now with Nobara). I followed this tutorial :https://fostips.com/install-nvidia-driver-in-debian-13/?amp=1
I explain the situation over here in more detail if by any chance this rings a bell with you :
https://forums.debian.net/viewtopic.php?t=164124
Cheers, appreciate the advice
you done fucked up the secure boot settings I think. I am in no way qualified to help you.
I don’t even understand how you can install a different OS. Work off a live USB if you even can.
As far as I understand this is the bit you fucked up. btw, the images in the debian forum post just show “filename1.jpg” as text and don’t display. post on !/c/[email protected]
Step 2: Enroll MOK key for Secure Boot Debian updates its kernel (minor versions) regularly for security updates and fixes. Without re-building kernel modules every time, DKMS is used, which however needs be signed for secure boot using a machine owner key (MOK). 1. First, run the command below to check if Debian was installed with UEFI boot by running the command below in terminal: ls /sys/firmware/efi The command tells to list the /sys/firmware/efi directory content. If it says “No such file or directory”, then you have Debian installed as legacy boot. 2. Next, run command to check if secure boot enabled: sudo mokutil --sb-state If both UEFI and secure boot enabled (as the screenshot below shows you), then you need to run commands below one by one to create and enroll MOK key. 3. First, run the command below to manually generate a mok key. sudo dkms generate_mok Run sudo apt install dkms if the dkms command not found, and set a password for the key. 4. Next, run command to import the key: sudo mokutil --import /var/lib/dkms/mok.pub 5. Finally, reboot your computer. At next boot, it should pop-up a screen (see the screenshot below), asking to perform MOK menagement. There, just choose to Enroll MOK -> continue -> confirm -> enter password (you set when creating the key) -> reboot. After enabled non-free repository and enrolled MOK key, you may then run the commands below to install NVIDIA driver. First, install the kernel headers for DKMS: sudo apt install linux-headers-$(dpkg --print-architecture)Thank you that’s already a lead !
I did follow the instructions to the letter so not sure what I should have done differently
I am going to ask on the community you linked. Thanks again
I just cross-posted my cry for help over there. Thanks again for the redirection. https://programming.dev/post/39832602
Can’t see the images in the forum, but is the kernel actually starting? (Does it get past grub? Does it get to grub?)
From your forum post it sounds like you’re seeing a secure boot issue, which may require changing some bios settings. (Installing the non free driver definitely breaks secure boot.)
Hi, how do I check for that ? how do I recognize grub ?
Here is a crosspost of my thread from the Debian forums :
https://programming.dev/post/39832602
Thanks a bunch for stopping by…
Yep, definitely secure boot. For now, you may be able to disable secure boot on your workstation or boot off of the install media and run the commands to enroll the mok key that you were given in another thread.
Thank you so much, that was it. I mean, I disabled secureboot, so now I can boot into either Bazzite or Windows, but this whole MOK key business? I’d love to know if I should try and correct it right now because it’ll come to bite me in the ass later if I don’t? What would you say?
Thanks again