On Wed, 3 Feb 2021 14:59:16 -0500 Jonathan Billings billings@negate.org wrote:
The only alternative is to sign the kernel modules with your own certificate, and load that certificate into the firmware as a valid Secure Boot CA.
https://docs.fedoraproject.org/en-US/fedora/f33/system-administrators-guide/...
I see from that page a signing program called sign-file, but no mention of pesign. Is pesign deprecated, or is sign-file just an alternate way of signing?