#Can't enroll SecureBlue key with Nvidia

1 messages · Page 1 of 1 (latest)

dry solar
#

Hi, I am having trouble enrolling the SecureBlue key. I just get the message "Failed to enroll new keys". I suspect its either a problem with nvidia since I get an error when I run nvidia-smi, or the secureblue password is wrong.

woven prairie
#

did it autoenroll or did you run the script manually

dry solar
#

I've been running both ujust enroll-secureblue-secure-boot-key and mokutil --import ... to try get it to work. Was the auto enroll just during initial setup?

woven prairie
#

yes

#

when you run the ujust

dry solar
#

output of mokutil --list-enrolled only shows the fedora key

woven prairie
#

you are setting the password properly?

#

to secureblue?

dry solar
#

I've done it well over 5 times now to ensure I am

woven prairie
#

strange

#

it is likely something unique to your bios

#

double check important settings like making sure microsoft's ca is enabled

#

making sure you're in user/standard mode and not setup

#

etc

dry solar
#

ok that's interesting that Microsoft's CA needs to be disabled

#

I was thinking I should have gone for the nvidia-closed image but when I checked my Nvidia GPU on wikipedia it showed it was Turing so that's prob not it

woven prairie
woven prairie
dry solar
#

what exactly is a turing laptop?

#

thought turing was an nvidia release

woven prairie
#

a laptop with a turing gpu

#

is it a laptop

dry solar
#

yes

woven prairie
#

ah

#

do you plan on gaming on it

dry solar
#

no

woven prairie
#

do you like having battery life

#

🙂

dry solar
#

haha why does the Nvidia card drain the battery life?

woven prairie
#

nvidia dropped power management support for turing

#

i am in the exact same boat

#

laptop with turing gpu

#

however

#

nouveau+NVK (the fully foss driver stack, not from nvidia) does support it :)))

#

the only downside is the gaming perf sucks

#

but my battery life tripled

#

@dry solar tldr you would:

  1. ujust remove-kargs-nvidia
  2. rebase to the equivalent -main image
  3. rpm-ostree kargs --append=nouveau.config=NvGspRm=1
  4. reboot
#

we don't include instructions for this on the site because it's an edge case

#

it only applies to:

  1. laptops
  2. with turing
  3. for users who don't care about gaming perf
dry solar
#

😄

woven prairie
#

that said you can probably still play lightweight games

#

but yeah even the reliability is better

#

fewer crashes

#

etc

#

tfw the open source community can make better drivers for nvidia cards than nvidia

#

also it will only get better because redhat is making a new NOVA driver in rust to replace nouveau

#

oh wait, @dry solar are you working with CUDA at all

#

for AI/ML

#

that's unsupported

#

so it's important to note

dry solar
dry solar
woven prairie
dry solar
#

ah ok

woven prairie
#

just run ujust rebase-secureblue and do the same steps except say "no" when asked if you have nvidia

dry solar
#

ok cool thanks a mil!

#

btw would this affect LLM inference at all?

#

like when running Ollama?

jaunty flax
#

You cannot run those with the open-source driver

#

CUDA requires the proprietary driver (either the open-kernel module or legacy one)

#

Not Nouveau or Nova

dry solar
#

dang

#

that is prob my only use case for the nvidia GPU

#

but it might be worth it for a better battery life

woven prairie
#

oh damn

#

glad i asked

#

lol

dry solar
#

I'll prob do what you say anyway cause my battery life is dogshit and I kinda use online LLMs most of the time anyway

jaunty flax
#

There is OpenCL as an alternative to CUDA, but it is not nearly as widely supported by apps and drivers

woven prairie
jaunty flax
#

I am not sure this is a general rule anymore

#

The old MUXed laptops used to be like this

woven prairie
#

@dry solar can always try it out and switch back

#

if needed

jaunty flax
#

The new MUXed laptops can switch the external ports to dGPU when needed, while MUXless laptops have dGPUs with no output ports at all

#

Mine is the latter

woven prairie
#

uh

#

on mine

#

the dgpu is the only way to use external monitors

jaunty flax
#

lspci | grep 'VGA\|3D'

woven prairie
#

no dgpu driver = no external monitor

jaunty flax
#

Then it uses the old MUX setup or is MUXless with the external port hardwired to the dGPU

#

There is technically four possible constellations

#

Which does not help at all

woven prairie
jaunty flax
#

Now I wonder if Genshin's inspiration for character constellations comes from this

#

Would not be the first inspiration from Nintendo

#

They also copied the concept of solving puzzles by playing music on an instrument

woven prairie
#

I just found "constellations" to be a very posh choice of words 😛

#

over "combinations" 😛

jaunty flax
#

That is why

woven prairie
#

yeah

#

in english, constellation means an arrangement of stars

#

almost always

dry solar
#

fwiw I also get Failed to set MokTimeout when I run the enrollment script

woven prairie
#

it's just preferred

#

in case fedora fucks up their key rotation again

#

(they did last year)

dry solar
#

ah okay interesting

#

ok cool that's good to know because I'm still trialling SecureBlue

#

thanks a mil for the help!

woven prairie
#

np

#

i would still recommend digging into that though