sign_kernel_modules.sh

echo "Sign NVIDIA and ORACLE kernel modules for using them with EFI mode in Debian Linux"

VERSION="$(uname -r)"
SHORT_VERSION="$(uname -r | cut -d . -f 1-2)"
MODULES_DIR=/lib/modules/${VERSION}
KBUILD_DIR=/usr/lib/linux-kbuild-${SHORT_VERSION}
cd "${MODULES_DIR}/updates/dkms"
for i in *.ko ; do 
	echo "Signing file ${i}"
	sudo "${KBUILD_DIR}"/scripts/sign-file sha256 /root/MOK.priv /root/MOK.der "$i"
done
cd  "${MODULES_DIR}/misc"
for i in *.ko ; do 
	echo "Signing file ${i}"
	sudo "${KBUILD_DIR}"/scripts/sign-file sha256 /root/MOK.priv /root/MOK.der "$i"
done

update-initramfs -u -k all