These are the correct packages to be providing the signed versions of these files from the Canonical archive, and https://launchpad.net/ubuntu/+source/linux-signed/4.17.0-7.8/+build/15229294 shows that /boot/vmlinuz-4.17.0-7-generic does correctly originate with the linux-signed source package.
Can you attach /boot/vmlinuz-4.17.0-7-generic here for direct inspection?
These are the correct packages to be providing the signed versions of these files from the Canonical archive, and https:/ /launchpad. net/ubuntu/ +source/ linux-signed/ 4.17.0- 7.8/+build/ 15229294 shows that /boot/vmlinuz- 4.17.0- 7-generic does correctly originate with the linux-signed source package.
Can you attach /boot/vmlinuz- 4.17.0- 7-generic here for direct inspection?