andrew/vmware-secureboot-sign-linux
1
0
Fork 0
mirror of https://github.com/Alee14/vmware-secureboot-sign-linux.git synced 2025-01-22 08:11:53 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Initial commit

Browse source
This commit is contained in:
Andrew Lee 2024-10-27 18:08:31 -04:00
commit 42bb82fd41
Signed by: andrew
SSH key fingerprint: SHA256:bbGg1DYG5CuKl2jo1DqzvUsaTeyvhM3tjCsej5lYMg4
4 changed files with 39 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored Normal file
View file

@ -0,0 +1 @@
MOK.*

8
README.md Normal file
View file

@ -0,0 +1,8 @@
# VMware Secure Boot Sign
This will sign vmmon.ko and vmnet.ko files on the kernel.
Tested on Fedora 40. May not work on other distros.
# How to run
First run `gen-key.sh` then `sign.sh`

10
gen-key.sh Executable file
View file

@ -0,0 +1,10 @@
#!/bin/bash
if [[ $EUID -ne 0 ]]; then
echo "This script must be run as root. Exiting."
exit 1
fi
openssl req -new -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -x509 -days 36500 -subj "/CN=VMware Module Signing Key"
mokutil --import MOK.der
echo "Reboot your computer"

20
sign.sh Executable file
View file

@ -0,0 +1,20 @@
#!/bin/bash
if [[ $EUID -ne 0 ]]; then
echo "This script must be run as root. Exiting."
exit 1
fi
/usr/src/kernels/$(uname -r)/scripts/sign-file \
sha256 \
MOK.priv \
MOK.der \
/lib/modules/$(uname -r)/misc/vmmon.ko
echo "Signed vmmon"
/usr/src/kernels/$(uname -r)/scripts/sign-file \
sha256 \
MOK.priv \
MOK.der \
/lib/modules/$(uname -r)/misc/vmnet.ko
echo "Signed vmnet"
modprobe vmmon