您的内核未签名。该系统将无法在安全启动环境中启动

Question

我已经使用 ubuntu 18.04从这里安装了主线内核 4.18 http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.18/

这些软件包未签名，现在 grub 在每次更新时都会抱怨这一点。

E: Your kernels are unsigned. This system will fail to boot in a secure boot environment.

我怎样才能让这条消息消失？或者签署一些4.18？

我不打算构建自己的内核。

Answer 1

我删除未签名内核的过程（忘记我已经安装了它？）：

\n\n

\n

$ uname -r\n4.17.2-041702-generic\n

\n

\n\n

\xe2\x80\x8d

\n\n

\n

$ ls /boot/\nabi-4.15.0-23-generic             memtest86+.elf\nabi-4.15.0-34-generic             memtest86+_multiboot.bin\nabi-4.17.2-041702-generic         retpoline-4.15.0-23-generic\nconfig-4.15.0-23-generic          retpoline-4.15.0-34-generic\nconfig-4.15.0-34-generic          retpoline-4.17.2-041702-generic\nconfig-4.17.2-041702-generic      System.map-4.15.0-23-generic\nefi                               System.map-4.15.0-34-generic\ngrub                              System.map-4.17.2-041702-generic\ninitrd.img-4.15.0-23-generic      vmlinuz-4.15.0-23-generic\ninitrd.img-4.15.0-34-generic      vmlinuz-4.15.0-34-generic\ninitrd.img-4.17.2-041702-generic  vmlinuz-4.17.2-041702-generic\nmemtest86+.bin\n

\n

\n\n

\xe2\x80\x8d

\n\n

\n

$ dpkg -S /boot/vmlinuz-4.17.2-041702-generic\nlinux-image-unsigned-4.17.2-041702-generic: /boot/vmlinuz-4.17.2-041702-generic\n

\n

\n\n

\xe2\x80\x8d

\n\n

\n

$ dpkg --list | grep 4.17.2\nii  linux-headers-4.17.2-041702                4.17.2-041702.201806160433                 all          Header files related to Linux kernel version 4.17.2\nii  linux-image-unsigned-4.17.2-041702-generic 4.17.2-041702.201806160433                 amd64        Linux kernel image for version 4.17.2 on 64 bit x86 SMP\nii  linux-modules-4.17.2-041702-generic        4.17.2-041702.201806160433                 amd64        Linux kernel extra modules for version 4.17.2 on 64 bit x86 SMP\n

\n

\n\n

\xe2\x80\x8d

\n\n

\n

$ dpkg --list | grep 4.17.2 | awk '{print $2}'\nlinux-headers-4.17.2-041702\nlinux-image-unsigned-4.17.2-041702-generic\nlinux-modules-4.17.2-041702-generic\n

\n

\n\n

\xe2\x80\x8d

\n\n

\n

$ sudo apt-get purge $(dpkg --list | grep 4.17.2 | awk '{print $2}')\n[sudo] password for alex:\nReading package lists... Done\nBuilding dependency tree\nReading state information... Done\nThe following packages will be REMOVED:\nlinux-headers-4.17.2-041702* linux-image-unsigned-4.17.2-041702-generic*\nlinux-modules-4.17.2-041702-generic*\n0 upgraded, 0 newly installed, 3 to remove and 0 not upgraded.\n2 not fully installed or removed.\nAfter this operation, 308 MB disk space will be freed.\nDo you want to continue? [Y/n] y\n(Reading database ... 203507 files and directories currently installed.)\nRemoving linux-headers-4.17.2-041702 (4.17.2-041702.201806160433) ...\nRemoving linux-image-unsigned-4.17.2-041702-generic (4.17.2-041702.201806160433) ...\nW: Removing the running kernel\nI: /vmlinuz.old is now a symlink to boot/vmlinuz-4.15.0-23-generic\nI: /initrd.img.old is now a symlink to boot/initrd.img-4.15.0-23-generic\n/etc/kernel/postrm.d/initramfs-tools:\nupdate-initramfs: Deleting /boot/initrd.img-4.17.2-041702-generic\n

\n

\n

Answer 2

我最终从 ubuntu 恢复到默认内核，一切都按预期工作。