DKMS drivers not being signed with the Secure Boot key

[Jorge Pérez Lara]

I have a USB wifi card I use on my desktop computer (although the problem is reproducible in this laptop I'm writing in).

The computer has secure boot enabled. It was upgraded from 22.04 to 22.10 successfully, without any errors or issues whatsoever. When I rebooted it, it wasn't able to detect the wifi network. Upon a bit a search, I found out the controller needed (bcmwl-kernel-source) was not being enabled properly, despite it working absolutely flawlessly in 22.04.

I tried to enroll the keys again, sign the module with the key and install in again, dpkg-reconfigure it, apt reinstall it...

This computer was running Kubuntu, but I tried with a clean Ubuntu 22.10 install and the same happened.

When I was using 22.04, the installer just requested me a password for enrolling the Secure Boot key, which I did, and every single module built using dkms was just automatically signed with it. It was the smoothest experience I've had with any distro. With 22.10, though, it seems plain impossible.

ProblemType: Bug
DistroRelease: Ubuntu 22.10
Package: mokutil 0.6.0-2
ProcVersionSignature: Ubuntu 5.19.0-23.24-generic 5.19.7
Uname: Linux 5.19.0-23-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.23.1-0ubuntu3
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Mon Oct 24 00:22:40 2022
InstallationDate: Installed on 2022-09-26 (27 days ago)
InstallationMedia: Ubuntu 22.04.1 LTS "Jammy Jellyfish" - Release amd64 (20220809.1)
SourcePackage: mokutil
UpgradeStatus: Upgraded to kinetic on 2022-10-20 (3 days ago)

[Dan Bungert (dbungert)]

This looks like the known DKMS issue in the Kinetic release.

Please try the steps at this link.
https://discourse.ubuntu.com/t/dkms-package-support-extra-drivers-does-not-work-in-ubuntu-22-10-install-media/31655

[Jorge Pérez Lara (jorgesgk)]

This worked beautifully!

Just so that you know, there's a typo (I've flagged it for moderation hoping somebody will be able to fix it, sorry if it causes trouble but I'd want this message to reach someone):

Instead of:

sudo kmodsign sha512 /var/lib/shim-signed/mok/MOK.priv /var/lib/shim-signed/mok/MOK.der /lib/modules/5.19.0-23-generic/updated/dkms/wl.ko

it should be:

sudo kmodsign sha512 /var/lib/shim-signed/mok/MOK.priv /var/lib/shim-signed/mok/MOK.der /lib/modules/5.19.0-23-generic/updates/dkms/wl.ko

It's a slight difference, but it must be right for the commands to work :)

Thanks for your help Dan!

[Dan Bungert (dbungert)]

Jorge, thanks so much for following up.
I passed along the message that discourse needed the typo fix - I appreciate the documentation help :) Take care.