[SOLVED] Mint 20.1 not signed kernel 5.15

[rimling]

Hi!

Single OS, Mint 20.1. Notebook Dell Precision 5550
https://termbin.com/k372 is result of

Code: Select all

$ inxi -Frxzc0

Several days ago install new kernel linux-image-5.15.0-17-generic over Update Manager and can't boot with it.
Message on boot:

Code: Select all

unknown command hwmatch
error: /boot/vmlinuz-5.15.0-17-generic has invalid signature

Have next kernels installed

Code: Select all

$ dpkg --list | grep linux-image
ii  linux-image-5.13.0-27-generic                               5.13.0-27.29~20.04.1                                        amd64        Signed kernel image generic
ii  linux-image-5.15.0-17-generic                               5.15.0-17.17~20.04.2                                        amd64        Signed kernel image generic
ii  linux-image-generic-hwe-20.04                               5.15.0.17.17~20.04.2                                        amd64        Generic Linux kernel image
ii  linux-image-unsigned-5.13.0-25-generic                      5.13.0-25.26~20.04.1                                        amd64        Linux kernel image for version 5.13.0 on 64 bit x86 SMP

Trying solve problem, add GRUB_GFXPAYLOAD_LINUX=keep to /etc/default/grub and run

Code: Select all

$ sudo dpkg-reconfigure grub-efi-amd64-signed 
/boot/vmlinuz-5.15.0-17-generic is signed, but using an unknown key:
        Subject: CN = PPA canonical-kernel-team ppa
E: Your kernels are not signed with a key known to your firmware. This system will fail to boot in a Secure Boot environment.

As I understand it, the kernel is not signed. There is a chance that a signed version of the kernel will be released in the future? Disabling secure boot is not an option

[JeremyB]

Likely before June whenever Mint 21 is released

[Larry78723]

If Mint is the only OS installed, what is your objection to turning off Secure Boot? It was designed specifically for Windows.

[rimling]

If Mint is the only OS installed, what is your objection to turning off Secure Boot? It was designed specifically for Windows.

I thought again, and disabled Secure Boot