Correct steps to install nvidia secureboot open drivers atomic

Ask Fedora
1

Before doing anything else want to know the steps for secureboot installation for nvidia open drivers.

Installed open drivers rpm already

So now i guess i need to sign those? Since there is the hack that does that so is those steps still valid?

Then sign and then drivers

2

well went ahead and did what i think was logical

installed the akmod-nvidia-default-open rpm and then runned sudo mokutil --import /etc/pki/akmods/certs/public_key.der signed the MOK and then installed rest of the drivers restart and finally sudo rpm-ostree kargs --append=rd.driver.blacklist=nouveau --append=modprobe.blacklist=nouveau --append=nvidia-drm.modeset=1

also should that akmod-nvidia-default-open be local package or layered package

3

my bad i guess i somehow thought i dont need to do the special hack when doing this… so now i used that special hack and have open drivers installed too with secure boot and now all is working as should i guess atleast cuda is working

phatle@cosmic:~$ nvidia-smi
Sat Mar  8 08:40:02 2025
+-----------------------------------------------------------------------------------------+
| NVIDIA-SMI 570.86.16              Driver Version: 570.86.16      CUDA Version: 12.8     |
|-----------------------------------------+------------------------+----------------------+
| GPU  Name                 Persistence-M | Bus-Id          Disp.A | Volatile Uncorr. ECC |
| Fan  Temp   Perf          Pwr:Usage/Cap |           Memory-Usage | GPU-Util  Compute M. |
|                                         |                        |               MIG M. |
|=========================================+========================+======================|
|   0  NVIDIA GeForce RTX 3050 ...    Off |   00000000:01:00.0 Off |                  N/A |
| N/A   43C    P3             14W /   35W |       1MiB /   4096MiB |      4%      Default |
|                                         |                        |                  N/A |
+-----------------------------------------+------------------------+----------------------+

+-----------------------------------------------------------------------------------------+
| Processes:                                                                              |
|  GPU   GI   CI              PID   Type   Process name                        GPU Memory |
|        ID   ID                                                               Usage      |
|=========================================================================================|
|  No running processes found                                                             |
+-----------------------------------------------------------------------------------------+

phatle@cosmic:~$ rpm-ostree status
State: idle
Deployments:
● ostree-unverified-registry:quay.io/fedora-ostree-desktops/cosmic-atomic:42
                   Digest: sha256:938446da029eaed465fb9d22c3f7df90e0575e1a19e17f4301ac4a55943b7e09
                  Version: 42.20250308.0 (2025-03-08T04:18:41Z)
          LayeredPackages: 1password 1password-cli akmod-nvidia akmods nordvpn-3.18.5 rpmdevtools
                           xorg-x11-drv-nvidia-cuda
            LocalPackages: akmod-nvidia-default-open-1-1.fc40.x86_64 akmods-keys-0.0.2-8.fc42.noarch

  ostree-unverified-registry:quay.io/fedora-ostree-desktops/cosmic-atomic:42
                   Digest: sha256:938446da029eaed465fb9d22c3f7df90e0575e1a19e17f4301ac4a55943b7e09
                  Version: 42.20250308.0 (2025-03-08T04:18:41Z)
          LayeredPackages: 1password 1password-cli akmod-nvidia nordvpn-3.18.5 xorg-x11-drv-nvidia-cuda
            LocalPackages: akmod-nvidia-default-open-1-1.fc40.x86_64