removed automatic reboot, exchanged for request to do so and instructions on what to do after that.
20 lines
819 B
Bash
20 lines
819 B
Bash
#!\bin\bash
|
|
#Quick script written by Will Russell for MOK enrollment kickoff on secureboot
|
|
#enabled linux systems - debian/Ubuntu based OS.
|
|
#SecureBoot has been enabled but for some reason your key didn't get cached
|
|
#Generally affects initializable drivers like NVIDIA GPU and other
|
|
#Load at boot system services that need a signature.
|
|
|
|
#disable secureboot in shim-signed:
|
|
echo "This script will ask for a password momentarily - please assign"
|
|
echo "the same key that you intend to enroll as your secureboot passphrase"
|
|
sleep 5
|
|
|
|
sudo mokutil --disable-validation
|
|
|
|
sleep 5
|
|
echo "Key captured, Please Restart your system to finish the setup. During boot it will ask you to 'enroll key' where you will insert"
|
|
echo "the password you just assigned. This will enable secureboot cached signatures for future updates"
|
|
exit 0
|
|
|