radioactivepb/ksigner

Description

A secure boot kernel signing utility. For use with custom/modified kernels and secure boot.

Installation Instructions

Install

sudo dnf copr enable radioactivepb/ksigner
sudo dnf install ksigner

Setup

# One-time setup for signing key generation
sudo ksigner setup
# Optional: Uncomment the AUTO_SIGN=true line in the configuration to allow for automatic kernel signing
sudo sed -i 's/^# *\(AUTO_SIGN=true\)/\1/' /etc/ksigner/ksigner.conf

Usage

# Sign the latest kernel
sudo ksigner sign
# Sign a specific kernel
sudo ksigner sign <vmlinuz_kernel_filepath>
# Sign all kernels
sudo ksigner sign-all

Configuration

Found at /etc/ksigner/ksigner.conf

# Automatically sign kernels when they are installed
# AUTO_SIGN=true

Active Releases

The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).

Release	Architectures	Repo Download
Fedora 41	x86_64 (6)*	Fedora 41 (31 downloads)
Fedora 42	x86_64 (19)*	Fedora 42 (32 downloads)
Fedora 43	x86_64 (7)*	Fedora 43 (31 downloads)
Fedora rawhide	x86_64 (8)*	Fedora rawhide (28 downloads)

* Total number of downloaded packages.