Nvidia Driver and secure boot issue

English Install/Boot/Login
21

Nah, It still doesn’t work with secure boot. I also did the Mok enrollment yet no luck. Idk, if I am doing sth wrong or what. It’s been 4 days I have been trying to find solution for this.

22

image
image847×57 11.6 KB

Here it says already enrolled.

23

You could start with finally showing the logs from your system. Beginning with full dmesg output after boot.

24

image
image1258×958 257 KB

image
image1258×958 253 KB

image
image833×945 219 KB

image
image833×958 236 KB

25

Upload output of dmesg to https://paste.opensuse.org/.

26

https://paste.opensuse.org/pastes/aab8454e7a40

27

Also in mok, the blue screen at reboot?

28 
[    6.131713] NVRM: loading NVIDIA UNIX x86_64 Kernel Module  550.67  Tue Mar 12 23:54:15 UTC 2024
[    6.261313] nvidia-modeset: Loading NVIDIA Kernel Mode Setting Driver for UNIX platforms  550.67  Tue Mar 12 23:29:25 UTC 2024

NVIDIA modules are loaded.

29

I think it did say during the blue screen at reboot. Is there any way to double check it?

30

What is causing the issue? If I turn my secure boot on the drivers doesn’t work.

31

Show output of

efibootmgr

NOT as picture. It is TEXT output.

1 Like
32 
Absolute path to 'efibootmgr' is '/usr/sbin/efibootmgr', so running it may require superuser privileges (eg. r
oot).
33

Whenever you see this it means to try again, doing one of two things:
1-run the command after logging in as root, or
2-prepend sudo to the command, e.g. sudo efibootmgr

34 
BootCurrent: 0001
Timeout: 1 seconds
BootOrder: 0001,0000
Boot0000* Windows Boot Manager  HD(1,GPT,ca56f1fb-2a83-4968-be42-876ae744c1bf,0x800,0x32000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)57494e444f5753000100000088000000780000004200430044004f0042004a004500430054003d007b00390064006500610038003600320063002d0035006300640064002d0034006500370030002d0061006300630031002d006600330032006200330034003400640034003700390035007d00000079000100000010000000040000007fff0400
Boot0001* opensuse-secureboot   HD(1,GPT,ca56f1fb-2a83-4968-be42-876ae744c1bf,0x800,0x32000)/File(\EFI\opensuse\shim.efi)
35

OK, that looks normal. Unfortunately, with Secure Boot disabled kernel does not even attempt to load enrolled certificates. Boot with secure boot enabled and post dmesg output.

36

Here!
https://paste.opensuse.org/pastes/3eaaec28e5ed

37

NVIDIA certificate is loaded

[    1.760083] integrity: Loaded X.509 cert 'Local build for nvidia-driver-G06 550.67 on 2024-04-24: 8bdb78a2c99e7b045a34557cc93eb868e4ef8d70'

but there is no trace of NVIDIA module which most likely means it is blacklisted. What is output of

modprobe -c | grep nvidia
38 
blacklist nvidia
blacklist nvidia_drm
blacklist nvidia_modeset
install nvidia PATH=$PATH:/bin:/usr/bin; if /sbin/modprobe --ignore-install nvidia; then   if /sbin/modprobe nvidia_uvm; then     if [ ! -c /dev/nvidia-uvm ]; then       mknod -m 660 /dev/nvidia-uvm c $(cat /proc/devices | while read major device; do if [ "$device" = "nvidia-uvm" ]; then echo $major; break; fi ; done) 0;        chown :video /dev/nvidia-uvm;     fi;     if [ ! -c /dev/nvidia-uvm-tools ]; then       mknod -m 660 /dev/nvidia-uvm-tools c $(cat /proc/devices | while read major device; do if [ "$device" = "nvidia-uvm" ]; then echo $major; break; fi ; done) 1;       chown :video /dev/nvidia-uvm-tools;     fi;   fi;   if [ ! -c /dev/nvidiactl ]; then     mknod -m 660 /dev/nvidiactl c 195 255;     chown :video /dev/nvidiactl;   fi;   devid=-1;   for dev in $(ls -d /sys/bus/pci/devices/*); do      vendorid=$(cat $dev/vendor);     if [ "$vendorid" = "0x10de" ]; then       class=$(cat $dev/class);       classid=${class%%00};       if [ "$classid" = "0x0300" -o "$classid" = "0x0302" ]; then          devid=$((devid+1));         if [ ! -L /run/udev/static_node-tags/uaccess/nvidia${devid} ]; then            ln -snf /dev/nvidia${devid} /run/udev/static_node-tags/uaccess/nvidia${devid};         fi;         if [ ! -c /dev/nvidia${devid} ]; then            mknod -m 660 /dev/nvidia${devid} c 195 ${devid};            chown :video /dev/nvidia${devid};         fi;       fi;     fi;   done;   /sbin/modprobe nvidia_drm;   if [ ! -c /dev/nvidia-modeset ]; then     mknod -m 660 /dev/nvidia-modeset c 195 254;     chown :video /dev/nvidia-modeset;   fi; fi 
options nvidia_drm modeset=1
options nvidia NVreg_DynamicPowerManagement=0x01
options nvidia NVreg_DeviceFileUID=0 NVreg_DeviceFileGID=483 NVreg_DeviceFileMode=0660 NVreg_PreserveVideoMemoryAllocations=1
options nvidia_drm modeset=1 fbdev=1
alias char_major_195_* nvidia
alias hid:b0003g*v00000955p00007214 hid_nvidia_shield
alias hid:b0005g*v00000955p00007214 hid_nvidia_shield
alias mbp_nvidia_bl apple_bl
alias pci:v000010DEd*sv*sd*bc03sc00i00* nvidia_drm
alias pci:v000010DEd*sv*sd*bc03sc00i00* nvidia
alias pci:v000010DEd*sv*sd*bc03sc02i00* nvidia_drm
alias pci:v000010DEd*sv*sd*bc03sc02i00* nvidia
alias pci:v000010DEd*sv*sd*bc06sc80i00* nvidia_drm
alias pci:v000010DEd*sv*sd*bc06sc80i00* nvidia
alias pci:v000010DEd*sv*sd*bc0Csc80i* i2c_nvidia_gpu
alias typec:id0955m* typec_nvidia
alias wmi:603E9613_EF25_4338_A3D0_C46177516DB7 nvidia_wmi_ec_backlight
alias symbol:nvKmsKapiGetFunctionsTable nvidia_modeset
alias symbol:nvUvmInterfaceAddressSpaceCreate nvidia
alias symbol:nvUvmInterfaceAddressSpaceDestroy nvidia
alias symbol:nvUvmInterfaceBindChannelResources nvidia
alias symbol:nvUvmInterfaceChannelAllocate nvidia
alias symbol:nvUvmInterfaceChannelDestroy nvidia
alias symbol:nvUvmInterfaceCslDecrypt nvidia
alias symbol:nvUvmInterfaceCslEncrypt nvidia
alias symbol:nvUvmInterfaceCslIncrementIv nvidia
alias symbol:nvUvmInterfaceCslInitContext nvidia
alias symbol:nvUvmInterfaceCslLogExternalEncryption nvidia
alias symbol:nvUvmInterfaceCslQueryMessagePool nvidia
alias symbol:nvUvmInterfaceCslRotateIv nvidia
alias symbol:nvUvmInterfaceCslSign nvidia
alias symbol:nvUvmInterfaceCslUpdateContext nvidia
alias symbol:nvUvmInterfaceDeRegisterUvmOps nvidia
alias symbol:nvUvmInterfaceDeinitCslContext nvidia
alias symbol:nvUvmInterfaceDestroyAccessCntrInfo nvidia
alias symbol:nvUvmInterfaceDestroyFaultInfo nvidia
alias symbol:nvUvmInterfaceDeviceCreate nvidia
alias symbol:nvUvmInterfaceDeviceDestroy nvidia
alias symbol:nvUvmInterfaceDisableAccessCntr nvidia
alias symbol:nvUvmInterfaceDupAddressSpace nvidia
alias symbol:nvUvmInterfaceDupAllocation nvidia
alias symbol:nvUvmInterfaceDupMemory nvidia
alias symbol:nvUvmInterfaceEnableAccessCntr nvidia
alias symbol:nvUvmInterfaceFlushReplayableFaultBuffer nvidia
alias symbol:nvUvmInterfaceFreeDupedHandle nvidia
alias symbol:nvUvmInterfaceGetChannelResourcePtes nvidia
alias symbol:nvUvmInterfaceGetEccInfo nvidia
alias symbol:nvUvmInterfaceGetExternalAllocPtes nvidia
alias symbol:nvUvmInterfaceGetFbInfo nvidia
alias symbol:nvUvmInterfaceGetGpuInfo nvidia
alias symbol:nvUvmInterfaceGetNonReplayableFaults nvidia
alias symbol:nvUvmInterfaceGetP2PCaps nvidia
alias symbol:nvUvmInterfaceGetPmaObject nvidia
alias symbol:nvUvmInterfaceHasPendingNonReplayableFaults nvidia
alias symbol:nvUvmInterfaceInitAccessCntrInfo nvidia
alias symbol:nvUvmInterfaceInitFaultInfo nvidia
alias symbol:nvUvmInterfaceMemoryAllocFB nvidia
alias symbol:nvUvmInterfaceMemoryAllocSys nvidia
alias symbol:nvUvmInterfaceMemoryCpuMap nvidia
alias symbol:nvUvmInterfaceMemoryCpuUnMap nvidia
alias symbol:nvUvmInterfaceMemoryFree nvidia
alias symbol:nvUvmInterfaceOwnPageFaultIntr nvidia
alias symbol:nvUvmInterfaceP2pObjectCreate nvidia
alias symbol:nvUvmInterfaceP2pObjectDestroy nvidia
alias symbol:nvUvmInterfacePagingChannelAllocate nvidia
alias symbol:nvUvmInterfacePagingChannelDestroy nvidia
alias symbol:nvUvmInterfacePagingChannelPushStream nvidia
alias symbol:nvUvmInterfacePagingChannelsMap nvidia
alias symbol:nvUvmInterfacePagingChannelsUnmap nvidia
alias symbol:nvUvmInterfacePmaAllocPages nvidia
alias symbol:nvUvmInterfacePmaFreePages nvidia
alias symbol:nvUvmInterfacePmaPinPages nvidia
alias symbol:nvUvmInterfacePmaRegisterEvictionCallbacks nvidia
alias symbol:nvUvmInterfacePmaUnregisterEvictionCallbacks nvidia
alias symbol:nvUvmInterfaceQueryCaps nvidia
alias symbol:nvUvmInterfaceQueryCopyEnginesCaps nvidia
alias symbol:nvUvmInterfaceRegisterGpu nvidia
alias symbol:nvUvmInterfaceRegisterUvmCallbacks nvidia
alias symbol:nvUvmInterfaceReleaseChannel nvidia
alias symbol:nvUvmInterfaceReportNonReplayableFault nvidia
alias symbol:nvUvmInterfaceRetainChannel nvidia
alias symbol:nvUvmInterfaceServiceDeviceInterruptsRM nvidia
alias symbol:nvUvmInterfaceSessionCreate nvidia
alias symbol:nvUvmInterfaceSessionDestroy nvidia
alias symbol:nvUvmInterfaceSetPageDirectory nvidia
alias symbol:nvUvmInterfaceStopChannel nvidia
alias symbol:nvUvmInterfaceTogglePrefetchFaults nvidia
alias symbol:nvUvmInterfaceTsgAllocate nvidia
alias symbol:nvUvmInterfaceTsgDestroy nvidia
alias symbol:nvUvmInterfaceUnregisterGpu nvidia
alias symbol:nvUvmInterfaceUnsetPageDirectory nvidia
alias symbol:nv_register_error_cb nvidia
alias symbol:nv_unregister_error_cb nvidia
alias symbol:nvidia_get_rm_ops nvidia
alias symbol:nvidia_p2p_destroy_mapping nvidia
alias symbol:nvidia_p2p_dma_map_pages nvidia
alias symbol:nvidia_p2p_dma_unmap_pages nvidia
alias symbol:nvidia_p2p_free_dma_mapping nvidia
alias symbol:nvidia_p2p_free_page_table nvidia
alias symbol:nvidia_p2p_get_pages nvidia
alias symbol:nvidia_p2p_get_pages_persistent nvidia
alias symbol:nvidia_p2p_get_rsync_registers nvidia
alias symbol:nvidia_p2p_init_mapping nvidia
alias symbol:nvidia_p2p_put_pages nvidia
alias symbol:nvidia_p2p_put_pages_persistent nvidia
alias symbol:nvidia_p2p_put_rsync_registers nvidia
alias symbol:nvidia_p2p_register_rsync_driver nvidia
alias symbol:nvidia_p2p_unregister_rsync_driver nvidia
39

Well, I do not know what loads modules when Secure Boot is disabled. But so far it does not look like Secure Boot issue.

40

@arvidjaar @exalted perhaps suse-prime has blacklisted…