This news is about the signed version.
UEFI Secure Boot requires that boot loader, kernel, and all kernel modules are signed with some certificate that the UEFI knows about.
The Rocky kernel and all modules that come with it are signed by Rocky. Installation of Rocky
gives a certificate to UEFI, so it knows Rocky’s signature. RHEL does the same.
Third-party kernel modules may or may not be signed. If not, then they cannot be loaded with Secure Boot on.
ELRepo has their own sign key. One has to import its certificate to UEFI with mokutil
.
NVidia has their own sign key. One has to import its certificate to UEFI with mokutil
.
The dkms
creates a key for you. One has to import its certificate to UEFI with mokutil
.
NVidia’s CUDA repository has proprietary and open drivers. Both precompiled (signed with NVidia’s key) and to build with dkms on your system.
The “preview” of this annoucement will have another copy of precompiled open driver, signed with RHEL’s key. These will be useful only if your system has RHEL’s key, i.e. if you have installed RHEL. That is a convenience for RHEL users – no need to add certificate with mokutil, but will not help other distros.
The NVidia’s open drivers support only Turing and newer NVidia cards.
The Blackwell seems to be the last generation supported by NVidia’s proprietary drivers.
NVidia writes:
The proprietary flavor supports the GPU architectures Maxwell, Pascal, Volta, Turing, and later GPUs until Blackwell. Blackwell and later are only supported by the open kernel modules.
The open flavor of kernel modules supports Turing and later GPUs. The open kernel modules cannot support GPUs before Turing, because the open kernel modules depend on the GPU System Processor (GSP) first introduced in Turing.
and
Open, i.e. source-published, kernel modules that are dual licensed MIT/GPLv2. With every driver release, the source code to the open kernel modules is published on GitHub - NVIDIA/open-gpu-kernel-modules: NVIDIA Linux open GPU kernel module source