Skip to content

Add Secure Boot warning to Debian, Ubuntu, and NixOS root guides - #632

Open
chrislongros wants to merge 1 commit into
openzfs:masterfrom
chrislongros:doc/secureboot-warning-rootonzfs
Open

Add Secure Boot warning to Debian, Ubuntu, and NixOS root guides#632
chrislongros wants to merge 1 commit into
openzfs:masterfrom
chrislongros:doc/secureboot-warning-rootonzfs

Conversation

@chrislongros

@chrislongros chrislongros commented May 11, 2026

Copy link
Copy Markdown
Contributor

Other Root-on-ZFS guides already note that ZFS modules cannot load with Secure Boot enabled (Fedora, Alpine, RHEL-based, Arch). The Debian,Ubuntu, and NixOS guides did not.

Closes #493

Signed-off-by: Christos Longros chris.longros@gmail.com

Other Root-on-ZFS guides already note that ZFS modules cannot load with
Secure Boot enabled (Fedora, Alpine, RHEL-based, Arch). The Debian,
Ubuntu, and NixOS guides did not.

Closes openzfs#493

Signed-off-by: Christos Longros <chris.longros@gmail.com>
@gmelikov

Copy link
Copy Markdown
Member

IIRC it can work with secure boot if you make some additional steps with MOK and self-sign modules https://wiki.debian.org/SecureBoot#MOK_-_Machine_Owner_Key (see DKMS and Secure Boot there too).

Didn't test it lately though, maybe we should add something about it in warning text.

@rlaager

rlaager commented May 11, 2026

Copy link
Copy Markdown
Member

With Ubuntu, shouldn't this be fine, since the modules ship with the upstream kernel?

Granted, I'm way behind in updating this, but hopefully I'll be getting back to this for Ubuntu 26.04 shortly. Ideally, I should update the instructions for Debian to use a local signing key.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Docs do not mention SecureBoot blocks zfs kernel module

3 participants