The linux-signed package is signed with Canonical's Secure Boot Signing Key, making the kernel bootable on systems that have secure boot enabled. This key is not public for obvious reasons, and only particular Kernel team members have access to it.
Where do you want to publish your kernel? Is it for regular users, does it contain a particular fix you are needing, or is it for a specific IOT hardware device?
If you have your own fleet of company laptops for example, you can enroll your own secure boot key into their MOKs, and sign the built kernel with that.
Let me know what you are trying to achieve, and I will see if I can help.
Hi Light_Kernel_Ops,
The linux-signed package is signed with Canonical's Secure Boot Signing Key, making the kernel bootable on systems that have secure boot enabled. This key is not public for obvious reasons, and only particular Kernel team members have access to it.
Where do you want to publish your kernel? Is it for regular users, does it contain a particular fix you are needing, or is it for a specific IOT hardware device?
If you have your own fleet of company laptops for example, you can enroll your own secure boot key into their MOKs, and sign the built kernel with that.
Let me know what you are trying to achieve, and I will see if I can help.
Thanks,
Matthew