NVIDIA drivers aren't running after fresh groovy install with Secure Boot enabled

[Marco Trevisan (Treviño)]

Ran an installation enabling nvidia drivers setup, at reboot I used my key to sign it...

However the module can't be loaded on reboot:

[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
[ 0.969187] Lockdown: swapper/0: hibernation is restricted; see man kernel_lockdown.7
[ 2.445463] Lockdown: systemd: /dev/mem,kmem,port is restricted; see man kernel_lockdown.7
[ 3.197078] Lockdown: systemd-udevd: unsigned module loading is restricted; see man kernel_lockdown.7
[ 3.555760] Lockdown: systemd-udevd: unsigned module loading is restricted; see man kernel_lockdown.7
[ 7.522144] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 11.260801] Lockdown: systemd-logind: hibernation is restricted; see man kernel_lockdown.7
[ 22.069746] Lockdown: systemd-logind: hibernation is restricted; see man kernel_lockdown.7
[ 23.863146] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 24.152678] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 198.092912] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 4870.953205] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7

Module should be signed though:

marco@marco-HP-Pavilion-Notebook-15-bc5xxx:~$ modinfo nvidia
filename: /lib/modules/5.8.0-25-generic/updates/dkms/nvidia.ko
alias: char-major-195-*
version: 455.28
supported: external
license: NVIDIA
srcversion: 9C3C7EC5A6962563520EEFD
alias: pci:v000010DEd*sv*sd*bc03sc02i00*
alias: pci:v000010DEd*sv*sd*bc03sc00i00*
depends:
retpoline: Y
name: nvidia
vermagic: 5.8.0-25-generic SMP mod_unload
sig_id: PKCS#7
signer: ubuntu Secure Boot Module Signature key
sig_key: 10:CE:AB:F5:60:0E:86:AA:FB:81:9B:80:D5:9E:11:32:B3:BF:86:B1
sig_hashalgo: sha512
signature: 57:C9:02:C9:D6:46:8A:F5:A5:B8:14:EF:2F:00:54:37:25:B3:24:0C:
  FF:12:6A:50:FC:91:E4:5F:16:7B:5E:95:9E:E1:5E:A2:F1:FC:8A:17:
  E3:36:86:00:CC:04:5A:9E:71:28:CC:A1:18:FE:27:FE:FF:9D:BE:D7:
  7E:7E:0F:0D:EF:EE:BC:AE:8B:0C:77:53:50:7C:C0:70:90:D1:B9:7B:
  6D:C4:FE:C0:62:88:A7:01:30:07:95:92:87:9C:E7:E5:37:74:1E:22:
  EB:17:E7:35:49:26:64:E5:92:22:5F:FA:DB:84:7A:DA:1D:D2:0C:F1:
  05:55:89:92:10:7F:9B:F1:A6:04:B4:CD:16:98:92:56:3A:35:3B:E9:
  BB:26:03:02:F9:80:23:AA:24:2B:30:E8:BE:40:87:B9:7A:DB:BF:E2:
  A2:EB:3D:EB:13:55:A3:B9:0A:18:EA:3B:67:A8:A5:85:79:01:D6:A3:
  47:8F:50:C3:18:DF:BD:AF:B4:2A:04:88:AE:A5:61:7E:86:B7:E2:D9:
  9B:CF:DE:BE:33:27:A3:0A:E2:A2:F0:9F:E9:16:58:04:68:82:F5:3C:
  31:42:50:6F:FC:51:09:E7:BE:16:52:41:00:C8:9E:42:D0:25:F8:CD:
  4E:90:89:B8:44:64:A7:8E:D6:07:C2:29:4D:F0:43:DF
parm: NvSwitchRegDwords:NvSwitch regkey (charp)
parm: NvSwitchBlacklist:NvSwitchBlacklist=uuid[,uuid...] (charp)
parm: nv_cap_enable_devfs:Enable (1) or disable (0) nv-caps devfs support. Default: 1 (int)
parm: NVreg_ResmanDebugLevel:int
parm: NVreg_RmLogonRC:int
parm: NVreg_ModifyDeviceFiles:int
parm: NVreg_DeviceFileUID:int
parm: NVreg_DeviceFileGID:int
parm: NVreg_DeviceFileMode:int
parm: NVreg_InitializeSystemMemoryAllocations:int
parm: NVreg_UsePageAttributeTable:int
parm: NVreg_RegisterForACPIEvents:int
parm: NVreg_EnablePCIeGen3:int
parm: NVreg_EnableMSI:int
parm: NVreg_TCEBypassMode:int
parm: NVreg_EnableStreamMemOPs:int
parm: NVreg_EnableBacklightHandler:int
parm: NVreg_RestrictProfilingToAdminUsers:int
parm: NVreg_PreserveVideoMemoryAllocations:int
parm: NVreg_DynamicPowerManagement:int
parm: NVreg_DynamicPowerManagementVideoMemoryThreshold:int
parm: NVreg_EnableUserNUMAManagement:int
parm: NVreg_MemoryPoolSize:int
parm: NVreg_KMallocHeapMaxSize:int
parm: NVreg_VMallocHeapMaxSize:int
parm: NVreg_IgnoreMMIOCheck:int
parm: NVreg_NvLinkDisable:int
parm: NVreg_EnablePCIERelaxedOrderingMode:int
parm: NVreg_RegisterPCIDriver:int
parm: NVreg_RegistryDwords:charp
parm: NVreg_RegistryDwordsPerDevice:charp
parm: NVreg_RmMsg:charp
parm: NVreg_GpuBlacklist:charp
parm: NVreg_TemporaryFilePath:charp
parm: NVreg_AssignGpus:charp

ProblemType: Bug
DistroRelease: Ubuntu 20.10
Package: ubiquity (not installed)
ProcVersionSignature: Ubuntu 5.8.0-25.26-generic 5.8.14
Uname: Linux 5.8.0-25-generic x86_64
ApportVersion: 2.20.11-0ubuntu50
Architecture: amd64
CasperMD5CheckResult: skip
Date: Wed Oct 21 17:05:48 2020
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz file=/cdrom/preseed/ubuntu.seed maybe-ubiquity quiet splash ---
InstallationDate: Installed on 2020-10-21 (0 days ago)
InstallationMedia: Ubuntu 20.10 "Groovy Gorilla" - Release amd64 (20201020)
SourcePackage: ubiquity
UpgradeStatus: No upgrade log present (probably fresh install)

[Dimitri John Ledkov (xnox)]

Two things:

1) Old iso used, which had dkms bit fixed in the 21 iso.

2) nvidia-graphics-drivers-455 got built and migrated with a matching lrm.....

nvidia-graphics-drivers-455 must have never migrated to groovy-release without lrm....

[Iain Lane (laney)]

Removing 455 from groovy to groovy-proposed to fix (2).

[Dimitri John Ledkov (xnox)]

Related ubuntu-drivers bug for better UX https://bugs.launchpad.net/ubuntu/+source/ubuntu-drivers-common/+bug/1900870

[Ubuntu QA Website (ubuntuqa)]

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
http://iso.qa.ubuntu.com/qatracker/reports/bugs/1900865

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.