{
    "version": "https://jsonfeed.org/version/1.1",
    "user_comment": "This feed allows you to read the posts from this site in any feed reader that supports the JSON Feed format. To add this feed to your reader, copy the following URL -- https://matoken.org/blog/tag/secureboot/feed/json/ -- and add it your reader.",
    "home_page_url": "https://matoken.org/blog/tag/secureboot/",
    "feed_url": "https://matoken.org/blog/tag/secureboot/feed/json/",
    "language": "ja",
    "title": "secureboot – matoken's blog",
    "description": "Is there no plan B?",
    "icon": "https://matoken.org/blog/wp-content/uploads/2025/03/cropped-1865f695c4eecc844385acef2f078255036adccd42c254580ea3844543ab56d9.jpeg",
    "items": [
        {
            "id": "http://matoken.org/blog/?p=3130",
            "url": "https://matoken.org/blog/2021/03/23/build-linux-kernel-5-11-on-debian-sid/",
            "title": "Debian sid\u3067Linux Kernel(5.11)\u3092build\u3059\u308b\u30e1\u30e2",
            "content_html": "<div id=\"preamble\">\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>Linux kernel\u306e\u65b0\u6a5f\u80fd\u3092\u8a66\u3057\u305f\u304f\u3066\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u30d1\u30c3\u30b1\u30fc\u30b8\u3088\u308a\u65b0\u3057\u3044\u3082\u306e\u3092\u4f7f\u3044\u305f\u3044\u3053\u3068\u304c\u3042\u308a\u307e\u3059\uff0e<br />\n\u6bce\u56de\u6ce8\u304e\u8db3\u3057\u3064\u304e\u8db3\u3057\u3067\u8a2d\u5b9a\u3057\u3066\u3044\u308b\u306e\u3067\u5b9f\u969b\u8a66\u3059\u3068\u8db3\u308a\u306a\u3044\u30d1\u30c3\u30b1\u30fc\u30b8\u7b49\u3042\u308b\u3068\u601d\u3044\u307e\u3059\u304c\u5927\u96d1\u628a\u306b\u6700\u8fd1\u306ekernel\u306ebuild\u624b\u9806\u3092\u30e1\u30e2\u3057\u3066\u304a\u304d\u307e\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u95a2\u9023\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u5c0e\u5165\">\u95a2\u9023\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u5c0e\u5165</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ sudo apt install build-essential fakeroot gpg2\n$ sudo apt build-dep linux</code></pre>\n</div>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u30bd\u30fc\u30b9\u306e\u5165\u624b\u3068\u7f72\u540d\u306e\u78ba\u8a8d\">\u30bd\u30fc\u30b9\u306e\u5165\u624b\u3068\u7f72\u540d\u306e\u78ba\u8a8d</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ wget https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.tar.xz https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.tar.sign\n$ unxz ./linux-5.11.tar.xz\n$ gpg --verify ./linux-5.11.tar.sign\ngpg: assuming signed data in './linux-5.11.tar'\ngpg: Signature made Mon 15 Feb 2021 06:11:32 PM JST\ngpg:                using RSA key 647F28654894E3BD457199BE38DBBDC86092693E\ngpg: Good signature from \"Greg Kroah-Hartman &lt;gregkh@linuxfoundation.org&gt;\" [unknown]\ngpg:                 aka \"Greg Kroah-Hartman (Linux kernel stable release signing key) &lt;greg@kroah.com&gt;\" [undefined]\ngpg:                 aka \"Greg Kroah-Hartman &lt;gregkh@kernel.org&gt;\" [unknown]\ngpg: WARNING: This key is not certified with a trusted signature!\ngpg:          There is no indication that the signature belongs to the owner.\nPrimary key fingerprint: 647F 2865 4894 E3BD 4571  99BE 38DB BDC8 6092 693E\n$ tar tvf ./linux-5.11.tar | lv\n$ tar xf ./linux-5.11.tar\n$ cd linux-5.11</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>source\u306f kernel.org \u304b\u3089\u30a2\u30fc\u30ab\u30a4\u30d6\u3092\u5165\u624b\u3057\u307e\u3057\u305f\uff0e\u4f59\u88d5\u304c\u3042\u3063\u305f\u3089git\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u307b\u3046\u304c\u4fbf\u5229\u3060\u3068\u601d\u3044\u307e\u3059\uff0e</p>\n</div>\n<div class=\"ulist\">\n<ul>\n<li><a href=\"https://www.kernel.org/\">The Linux Kernel Archives</a></li>\n</ul>\n</div>\n<div class=\"paragraph\">\n<p>\u7f72\u540d\u306f\u4ee5\u4e0b\u304b\u3089\u78ba\u8a8d\u3057\u307e\u3059\uff0e</p>\n</div>\n<div class=\"ulist\">\n<ul>\n<li><a href=\"https://www.kernel.org/category/signatures.html\">The Linux Kernel Archives &#8211; Signatures</a></li>\n</ul>\n</div>\n<div class=\"paragraph\">\n<p>\u7f72\u540d\u306fxz\u3067\u306f\u306a\u304ftar\u306b\u5bfe\u3057\u3066\u306e\u3082\u306e\u306a\u306e\u3067\u4e00\u65e6.xz\u304b\u3089\u5c55\u958b\u3057\u305f.tar\u3067\u78ba\u8a8d\u3057\u307e\u3059\uff0e<br />\n\u7f72\u540d\u30c1\u30a7\u30c3\u30af\u304cOK\u3060\u3063\u305f\u3089\u5c55\u958b\u3057\u307e\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_config\u306e\u4f5c\u6210\">config\u306e\u4f5c\u6210</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ cp /boot/config-`uname -r` ./.config\n$ make oldconfig</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>kernel\u306e <code>.config</code> \u30d5\u30a1\u30a4\u30eb\u3092\u73fe\u5728\u306eKernel\u306e <code>.config</code> \u3092\u5143\u306b\u4f5c\u6210\u3057\u307e\u3059\uff0e<br />\n<code>make oldconfig</code> \u3067\u5dee\u5206\u306e\u5909\u66f4\u3092\u5bfe\u8a71\u5f62\u5f0f\u3067\u805e\u3044\u3066\u304f\u308b\u306e\u3067\u7b54\u3048\u3066\u3044\u304d\u307e\u3059\uff0e\u3059\u3079\u3066\u30c7\u30d5\u30a9\u30eb\u30c8\u306b\u3059\u308b\u5834\u5408\u306f <code>olddefconfig</code> \u3092\u4f7f\u3044\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ make xconfig</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u304c\u5fc5\u8981\u306a\u5834\u5408\u306f <code>make menuconfig</code>, <code>nconfig</code> \u7b49\u3067\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3057\u307e\u3059\uff0e<br />\nGUI\u306e\u5834\u5408xconfig(QT base)/gconfig(GTK+ base)\u306a\u3069\u304c\u4fbf\u5229\u3060\u3068\u601d\u3044\u307e\u3059\uff0e</p>\n</div>\n<div class=\"paragraph\">\n<p><code>.config</code> \u304c\u66f4\u65b0\u3055\u308c\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ make testconfig</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u8a2d\u5b9a\u5f8c\u4e00\u5fdc\u30c6\u30b9\u30c8\u3057\u3066\u304a\u304d\u307e\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u306e\u305f\u3081\u306edebian_uefi\u8a3c\u660e\u66f8\u3092\u30b3\u30d4\u30fc\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u3092\u4f7f\u308f\u306a\u3044\u5834\u5408\u306f\u30b9\u30ad\u30c3\u30d7\">\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u306e\u305f\u3081\u306eDebian UEFI\u8a3c\u660e\u66f8\u3092\u30b3\u30d4\u30fc(\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u3092\u4f7f\u308f\u306a\u3044\u5834\u5408\u306f\u30b9\u30ad\u30c3\u30d7)</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ tar xf ../linux_5.10.9-1.debian.tar.xz debian/certs/</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u65e2\u5b58\u306eDebian kernel source( <code>apt source linux</code> \u3067\u5165\u624b\u53ef\u80fd)\u304b\u3089\u30b3\u30d4\u30fc\u3057\u3066\u304d\u307e\u3059\uff0e(\u4ed6\u306b\u6b63\u653b\u6cd5\u304c\u3042\u308b\u6c17\u304c\u3059\u308b)</p>\n<div class=\"add\">\n<blockquote><p>2021-04-28 \u8ffd\u8a18)<br />\nDebian pkg\u306eLinux source \u304b\u3089\u8cb0\u3063\u3066\u3053\u306a\u304f\u3066\u3082 <code class=\"language-shell\" data-lang=\"shell\">.config</code> \u306e <code class=\"language-shell\" data-lang=\"shell\">CONFIG_SYSTEM_TRUSTED_KEYS</code> \u3092 <code class=\"language-shell\" data-lang=\"shell\">\"\"</code>\u306b\u3059\u308b\u3053\u3068\u3067\u30a8\u30e9\u30fc\u3092\u56de\u907f\u3067\u304d\u308b\u3088\u3046\u3067\u3059\uff0e</p>\n<ul>\n<li><a href=\"https://wiki.debian.org/BuildADebianKernelPackage\">BuildADebianKernelPackage &#8211; Debian Wiki</a></li>\n</ul>\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">@@ -9373,7 +9375,7 @@\n#\nCONFIG_MODULE_SIG_KEY=\"\"\nCONFIG_SYSTEM_TRUSTED_KEYRING=y\n-CONFIG_SYSTEM_TRUSTED_KEYS=\"debian/certs/debian-uefi-certs.pem\"\n+CONFIG_SYSTEM_TRUSTED_KEYS=\"\"\n# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set\nCONFIG_SECONDARY_TRUSTED_KEYRING=y\nCONFIG_SYSTEM_BLACKLIST_KEYRING=y</code></pre>\n<p>Linux 5.12.0 \u3067\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u51fa\u6765\u308b\u306e\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\uff0e</p></blockquote>\n</div>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_build\">build</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ time make -j`nproc` bindeb-pkg\n  :\n  dpkg-deb: building package 'linux-libc-dev' in '../linux-libc-dev_5.11.0-1_amd64.deb'.\ndpkg-deb: building package 'linux-image-5.11.0' in '../linux-image-5.11.0_5.11.0-1_amd64.deb'.\ndpkg-deb: building package 'linux-image-5.11.0-dbg' in '../linux-image-5.11.0-dbg_5.11.0-1_amd64.deb'.\n dpkg-genbuildinfo --build=binary\n dpkg-genchanges --build=binary &gt;../linux-5.11.0_5.11.0-1_amd64.changes\ndpkg-genchanges: info: binary-only upload (no source code included)\n dpkg-source --after-build .\ndpkg-buildpackage: info: binary-only upload (no source included)\n$ ls -1s ../linux*.deb\n  7932 ../linux-headers-5.11.0_5.11.0-1_amd64.deb\n728724 ../linux-image-5.11.0-dbg_5.11.0-1_amd64.deb\n 52136 ../linux-image-5.11.0_5.11.0-1_amd64.deb\n  1124 ../linux-libc-dev_5.11.0-1_amd64.deb</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>build\u3057\u3066\u6210\u529f\u3059\u308b\u3068\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u751f\u6210\u3055\u308c\u307e\u3059\uff0e</p>\n</div>\n<div class=\"paragraph\">\n<p>CPU i5-3320M/RAM 16GB/SATA SSD\u306e\u74b0\u5883\u3067200\u5206\u7a0b\u304b\u304b\u308a\u307e\u3057\u305f\uff0e\u5225\u306e\u4f5c\u696d\u3092\u3057\u306a\u304c\u3089\u3060\u3068\u3055\u3089\u306b\u6642\u9593\u304c\u4f38\u3073\u307e\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_kernel\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u5c0e\u5165\">kernel\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u5c0e\u5165</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ sudo apt install ../linux-image-5.11.0_5.11.0-1_amd64.deb ../linux-libc-dev_5.11.0-1_amd64.deb ../linux-headers-5\n.11.0_5.11.0-1_amd64.deb</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u51fa\u6765\u4e0a\u304c\u3063\u305fkernel\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u5c0e\u5165\u3057\u307e\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u53e4\u3044kernel\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u524a\u9664\">\u53e4\u3044kernel\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u524a\u9664</h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u53e4\u3044\u4f7f\u308f\u306a\u304f\u306a\u3063\u305fKernel\u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u30c7\u30a3\u30b9\u30af\u3092\u6d88\u8cbb\u3059\u308b\u306e\u3067(\u7279\u306b <code>/boot</code> )\u524a\u9664\u3057\u307e\u3057\u3087\u3046</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ dpkg -l linux-image* | grep ^ii\nii  linux-image-5.10.0-4-amd64          5.10.19-1          amd64        Linux 5.10 for 64-bit PCs (signed)\nii  linux-image-5.11.7                  5.11.7-2           amd64        Linux kernel, version 5.11.7\nii  linux-image-5.11.8+                 5.11.8+-3          amd64        Linux kernel, version 5.11.8+\n$ sudo apt purge linux-image-5.11.7</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u78ba\u8a8d\u3057\u3066\u53e4\u3044\u3082\u306e\u3092\u524a\u9664\u3057\u307e\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_machine_owner_key\u3067\u7f72\u540d\u3059\u308b\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u3092\u4f7f\u308f\u306a\u3044\u5834\u5408\u306f\u30b9\u30ad\u30c3\u30d7\">Machine Owner Key\u3067\u7f72\u540d\u3059\u308b(\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u3092\u4f7f\u308f\u306a\u3044\u5834\u5408\u306f\u30b9\u30ad\u30c3\u30d7)</h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u524d\u3082\u3063\u3066MOK(Machine Owner Key)\u306e\u7528\u610f\u3092\u3057\u3066\u8a2d\u5b9a\u3057\u3066\u304a\u304d\u307e\u3059\uff0eMOK\u306e\u4f5c\u6210\u306b\u3064\u3044\u3066\u306f\u3053\u3061\u3089\u3092\uff0e</p>\n</div>\n<div class=\"ulist\">\n<ul>\n<li><a href=\"https://wiki.debian.org/SecureBoot\">SecureBoot &#8211; Debian Wiki</a></li>\n</ul>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ sudo sbsign --key ~/MOK.priv --cert ~/MOK.pem /boot/vmlinuz-5.11.0 --output vmlinuz-5.11.0\n$ sudo mv ./vmlinuz-5.11.0 /boot/vmlinuz-5.11.0</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>Kernel\u306b\u7f72\u540d\u3057\u307e\u3059\uff0e<br />\n\u3053\u3053\u3067\u306f\u4f5c\u6210\u3057\u305fMOK\u306e\u9375( <code>~/MOK.priv</code> )\u3068\u8a3c\u660e\u66f8( <code>~/MOK.pem</code> )\u3092\u4f7f\u3044\uff0c <code>/boot/vmlinuz-5.11.0</code> \u306b\u7f72\u540d\u3057\u3066\u5dee\u3057\u66ff\u3048\u3066\u3044\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ find /lib/modules/5.11.0/updates/dkms/ -type f -print0 | xargs -0 -n1 sudo ./scripts/sign-file sha256 ~/MOK.priv ~/MOK.der</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>DKIM\u3067\u4f5c\u3089\u308c\u305f\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u3082\u7f72\u540d\u3057\u307e\u3059\uff0e</p>\n<div class=\"quoteblock\">\n<blockquote>\n<div class=\"paragraph\">\n<p>\u8ffd\u8a18 20210830)</p>\n</div>\n<div class=\"paragraph\">\n<p><code>/etc/dkms/sign_helper.sh</code> \u3068\u3044\u3046\u30d5\u30a1\u30a4\u30eb\u304c\u3042\u308a\u307e\u3057\u305f\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"title\">/etc/dkms/sign_helper.sh</div>\n<div class=\"content\">\n<pre>#!/bin/sh\n/lib/modules/\"$1\"/build/scripts/sign-file sha512 /root/mok.priv /root/mok.der \"$2\"</pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>MOK\u306e\u30d5\u30a1\u30a4\u30eb\u3092 <code>/root/mok/priv</code>, <code>/root/mok.der</code>, <code>/root/mok.pem</code> \u3068\u3057\u3066\u304a\u304f\u3068 dkms \u5b9f\u884c\u6642\u306b\u81ea\u52d5\u7684\u306b\u7f72\u540d\u3057\u3066\u304f\u308c\u308b\u3088\u3046\u3067\u3059\uff0ekernel install\u6642\u3060\u3051\u3067\u306a\u304f dkms \u66f4\u65b0\u6642\u306a\u3069\u306b\u3082\u81ea\u52d5\u5b9f\u884c\u3057\u3066\u304f\u308c\u308b\u306e\u3067\u7f72\u540d\u3057\u5fd8\u308c\u304c\u7121\u304f\u306a\u3063\u3066\u52a9\u304b\u308a\u307e\u3059\uff0e</p>\n</div>\n<div class=\"paragraph\">\n<p>changelog \u3092\u898b\u308b\u3068 dkms 2.8.3-3 \u304b\u3089\u5165\u3063\u305f\u3088\u3046\u3067\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"title\">/usr/share/doc/dkms/changelog.Debian.gz</div>\n<div class=\"content\">\n<pre>dkms (2.8.3-3) unstable; urgency=medium\n\n  * dynamically generate breaks for shim-signed in Ubuntu and Derivates\n\n -- Gianfranco Costamagna &lt;locutusofborg@debian.org&gt;  Wed, 29 Jul 2020 10:30:50 +0200</pre>\n</div>\n</div>\n</blockquote>\n</div>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u518d\u8d77\u52d5\u3057\u3066\u53cd\u6620\">\u518d\u8d77\u52d5\u3057\u3066\u53cd\u6620</h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u3046\u307e\u304f\u884c\u3051\u3070\u65b0\u3057\u3044Kernel\u3067\u8d77\u52d5\u3067\u304d\u307e\u3059\uff0e<br />\n\u3046\u307e\u304f\u884c\u304b\u306a\u3044\u5834\u5408\u306f\u53e4\u3044Kernel\u3067\u8d77\u52d5\u3057\u3066\u8a2d\u5b9a\u3057\u76f4\u3057\u307e\u3057\u3087\u3046\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_patch\">patch</h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>kernel.org\u306b\u306f\u30d1\u30c3\u30c1\u304c2\u7a2e\u985e\u3042\u308a\u307e\u3059\uff0en.y.0\u304b\u3089\u306e\u7d2f\u7a4d\u30d1\u30c3\u30c1\u3068\u3059\u3050\u524d\u306e\u30d0\u30fc\u30b7\u30e7\u30f3\u304b\u3089\u306e\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30eb\u30d1\u30c3\u30c1\u304c\u3042\u308a\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ sudo apt install patch</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p><code>patch</code> \u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u5fc5\u8981\u306a\u306e\u3067\u5c0e\u5165\u3057\u3066\u304a\u304d\u307e\u3059\uff0e</p>\n</div>\n<div class=\"sect2\">\n<h3 id=\"_\u7d2f\u7a4dpatch\">\u7d2f\u7a4dpatch</h3>\n<div class=\"paragraph\">\n<p>\u4e0a\u3067\u306fKernel 5.11.0\u3092build\u3057\u307e\u3057\u305f\uff0eKernel 5.11.7\u3092\u9069\u7528\u3057\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ wget https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.11.8.xz</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u9593\u304c\u7a7a\u3044\u3066\u3044\u308b\u306e\u3067\u7d2f\u7a4d\u30d1\u30c3\u30c1\u3092\u5165\u624b\u3057\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ cd linux-5.11\n$ xzcat ../patch-5.11.8.xz | patch -p1</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>source\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u79fb\u52d5\u3057\u3066\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3059\uff0e</p>\n</div>\n<div class=\"paragraph\">\n<p>\u3042\u3068\u306f\u4e0a\u306e\u624b\u9806\u3068\u540c\u3058\u3067\u3059\uff0e</p>\n</div>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30ebpatch\">\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30ebpatch</h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u6b21\u306b 5.11.7 \u304b\u3089 5.11.8 \u306e\u3088\u3046\u306b1\u3064\u3060\u3051\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u305f\u3044\u3068\u304d\u306e\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30eb\u30d1\u30c3\u30c1\u306e\u624b\u9806\u3067\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ wget https://cdn.kernel.org/pub/linux/kernel/v5.x/incr/patch-5.11.7-8.xz</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30eb\u30d1\u30c3\u30c1\u3092\u5165\u624b\u3057\u307e\u3059\uff0e</p>\n</div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ cd linux-5.11\n$ xzcat ../patch-5.11.7-8.xz | patch -p1</code></pre>\n</div>\n</div>\n<div class=\"paragraph\">\n<p>source\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u79fb\u52d5\u3057\u3066\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3059\uff0e</p>\n</div>\n<div class=\"paragraph\">\n<p>\u3042\u3068\u306f\u4e0a\u306e\u624b\u9806\u3068\u540c\u3058\u3067\u3059\uff0e</p>\n</div>\n</div>\n</div>\n<div class=\"sect1\">\n<h2 id=\"_\u74b0\u5883\">\u74b0\u5883</h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre class=\"highlight\"><code class=\"language-shell\" data-lang=\"shell\">$ sudo lshw -c system -sanitize | head\ncomputer\n    description: Notebook\n    product: 23533KJ (LENOVO_MT_2353)\n    vendor: LENOVO\n    version: ThinkPad T430s\n    serial: [REMOVED]\n    width: 64 bits\n    capabilities: smbios-2.7 dmi-2.7 smp vsyscall32\n    configuration: administrator_password=disabled chassis=notebook family=ThinkPad T430s power-on_password=disabled sku=LENOVO_MT_2353 uuid=[REM\nOVED]\n  *-pnp00:00\n$ dpkg-query -W shim-signed-common shim-unsigned linux-*5.11.8* build-essential fakeroot\nbuild-essential 12.9\nfakeroot        1.25.3-1.1\nlinux-headers-5.11.8+   5.11.8+-3\nlinux-image-5.11.8+     5.11.8+-3\nshim-signed-common      1.33+15+1533136590.3beb971-7\nshim-unsigned   15+1533136590.3beb971-10\n$ lsb_release -dr\nDescription:    Debian GNU/Linux bullseye/sid\nRelease:        unstable\n$ uname -smr\nLinux 5.11.8+ x86_64</code></pre>\n</div>\n</div>\n</div>\n</div>\n",
            "content_text": "Linux kernel\u306e\u65b0\u6a5f\u80fd\u3092\u8a66\u3057\u305f\u304f\u3066\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u30d1\u30c3\u30b1\u30fc\u30b8\u3088\u308a\u65b0\u3057\u3044\u3082\u306e\u3092\u4f7f\u3044\u305f\u3044\u3053\u3068\u304c\u3042\u308a\u307e\u3059\uff0e\n\u6bce\u56de\u6ce8\u304e\u8db3\u3057\u3064\u304e\u8db3\u3057\u3067\u8a2d\u5b9a\u3057\u3066\u3044\u308b\u306e\u3067\u5b9f\u969b\u8a66\u3059\u3068\u8db3\u308a\u306a\u3044\u30d1\u30c3\u30b1\u30fc\u30b8\u7b49\u3042\u308b\u3068\u601d\u3044\u307e\u3059\u304c\u5927\u96d1\u628a\u306b\u6700\u8fd1\u306ekernel\u306ebuild\u624b\u9806\u3092\u30e1\u30e2\u3057\u3066\u304a\u304d\u307e\u3059\uff0e\n\n\n\n\n\u95a2\u9023\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u5c0e\u5165\n\n\n\n$ sudo apt install build-essential fakeroot gpg2\n$ sudo apt build-dep linux\n\n\n\n\n\n\u30bd\u30fc\u30b9\u306e\u5165\u624b\u3068\u7f72\u540d\u306e\u78ba\u8a8d\n\n\n\n$ wget https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.tar.xz https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.tar.sign\n$ unxz ./linux-5.11.tar.xz\n$ gpg --verify ./linux-5.11.tar.sign\ngpg: assuming signed data in './linux-5.11.tar'\ngpg: Signature made Mon 15 Feb 2021 06:11:32 PM JST\ngpg:                using RSA key 647F28654894E3BD457199BE38DBBDC86092693E\ngpg: Good signature from \"Greg Kroah-Hartman &lt;gregkh@linuxfoundation.org&gt;\" [unknown]\ngpg:                 aka \"Greg Kroah-Hartman (Linux kernel stable release signing key) &lt;greg@kroah.com&gt;\" [undefined]\ngpg:                 aka \"Greg Kroah-Hartman &lt;gregkh@kernel.org&gt;\" [unknown]\ngpg: WARNING: This key is not certified with a trusted signature!\ngpg:          There is no indication that the signature belongs to the owner.\nPrimary key fingerprint: 647F 2865 4894 E3BD 4571  99BE 38DB BDC8 6092 693E\n$ tar tvf ./linux-5.11.tar | lv\n$ tar xf ./linux-5.11.tar\n$ cd linux-5.11\n\n\n\nsource\u306f kernel.org \u304b\u3089\u30a2\u30fc\u30ab\u30a4\u30d6\u3092\u5165\u624b\u3057\u307e\u3057\u305f\uff0e\u4f59\u88d5\u304c\u3042\u3063\u305f\u3089git\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u307b\u3046\u304c\u4fbf\u5229\u3060\u3068\u601d\u3044\u307e\u3059\uff0e\n\n\n\nThe Linux Kernel Archives\n\n\n\n\u7f72\u540d\u306f\u4ee5\u4e0b\u304b\u3089\u78ba\u8a8d\u3057\u307e\u3059\uff0e\n\n\n\nThe Linux Kernel Archives &#8211; Signatures\n\n\n\n\u7f72\u540d\u306fxz\u3067\u306f\u306a\u304ftar\u306b\u5bfe\u3057\u3066\u306e\u3082\u306e\u306a\u306e\u3067\u4e00\u65e6.xz\u304b\u3089\u5c55\u958b\u3057\u305f.tar\u3067\u78ba\u8a8d\u3057\u307e\u3059\uff0e\n\u7f72\u540d\u30c1\u30a7\u30c3\u30af\u304cOK\u3060\u3063\u305f\u3089\u5c55\u958b\u3057\u307e\u3059\uff0e\n\n\n\n\nconfig\u306e\u4f5c\u6210\n\n\n\n$ cp /boot/config-`uname -r` ./.config\n$ make oldconfig\n\n\n\nkernel\u306e .config \u30d5\u30a1\u30a4\u30eb\u3092\u73fe\u5728\u306eKernel\u306e .config \u3092\u5143\u306b\u4f5c\u6210\u3057\u307e\u3059\uff0e\nmake oldconfig \u3067\u5dee\u5206\u306e\u5909\u66f4\u3092\u5bfe\u8a71\u5f62\u5f0f\u3067\u805e\u3044\u3066\u304f\u308b\u306e\u3067\u7b54\u3048\u3066\u3044\u304d\u307e\u3059\uff0e\u3059\u3079\u3066\u30c7\u30d5\u30a9\u30eb\u30c8\u306b\u3059\u308b\u5834\u5408\u306f olddefconfig \u3092\u4f7f\u3044\u307e\u3059\uff0e\n\n\n\n$ make xconfig\n\n\n\n\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u304c\u5fc5\u8981\u306a\u5834\u5408\u306f make menuconfig, nconfig \u7b49\u3067\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3057\u307e\u3059\uff0e\nGUI\u306e\u5834\u5408xconfig(QT base)/gconfig(GTK+ base)\u306a\u3069\u304c\u4fbf\u5229\u3060\u3068\u601d\u3044\u307e\u3059\uff0e\n\n\n.config \u304c\u66f4\u65b0\u3055\u308c\u307e\u3059\uff0e\n\n\n\n$ make testconfig\n\n\n\n\u8a2d\u5b9a\u5f8c\u4e00\u5fdc\u30c6\u30b9\u30c8\u3057\u3066\u304a\u304d\u307e\u3059\uff0e\n\n\n\n\n\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u306e\u305f\u3081\u306eDebian UEFI\u8a3c\u660e\u66f8\u3092\u30b3\u30d4\u30fc(\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u3092\u4f7f\u308f\u306a\u3044\u5834\u5408\u306f\u30b9\u30ad\u30c3\u30d7)\n\n\n\n$ tar xf ../linux_5.10.9-1.debian.tar.xz debian/certs/\n\n\n\n\u65e2\u5b58\u306eDebian kernel source( apt source linux \u3067\u5165\u624b\u53ef\u80fd)\u304b\u3089\u30b3\u30d4\u30fc\u3057\u3066\u304d\u307e\u3059\uff0e(\u4ed6\u306b\u6b63\u653b\u6cd5\u304c\u3042\u308b\u6c17\u304c\u3059\u308b)\n\n2021-04-28 \u8ffd\u8a18)\nDebian pkg\u306eLinux source \u304b\u3089\u8cb0\u3063\u3066\u3053\u306a\u304f\u3066\u3082 .config \u306e CONFIG_SYSTEM_TRUSTED_KEYS \u3092 \"\"\u306b\u3059\u308b\u3053\u3068\u3067\u30a8\u30e9\u30fc\u3092\u56de\u907f\u3067\u304d\u308b\u3088\u3046\u3067\u3059\uff0e\n\nBuildADebianKernelPackage &#8211; Debian Wiki\n\n@@ -9373,7 +9375,7 @@\n#\nCONFIG_MODULE_SIG_KEY=\"\"\nCONFIG_SYSTEM_TRUSTED_KEYRING=y\n-CONFIG_SYSTEM_TRUSTED_KEYS=\"debian/certs/debian-uefi-certs.pem\"\n+CONFIG_SYSTEM_TRUSTED_KEYS=\"\"\n# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set\nCONFIG_SECONDARY_TRUSTED_KEYRING=y\nCONFIG_SYSTEM_BLACKLIST_KEYRING=y\nLinux 5.12.0 \u3067\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u51fa\u6765\u308b\u306e\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\uff0e\n\n\n\n\n\nbuild\n\n\n\n$ time make -j`nproc` bindeb-pkg\n  :\n  dpkg-deb: building package 'linux-libc-dev' in '../linux-libc-dev_5.11.0-1_amd64.deb'.\ndpkg-deb: building package 'linux-image-5.11.0' in '../linux-image-5.11.0_5.11.0-1_amd64.deb'.\ndpkg-deb: building package 'linux-image-5.11.0-dbg' in '../linux-image-5.11.0-dbg_5.11.0-1_amd64.deb'.\n dpkg-genbuildinfo --build=binary\n dpkg-genchanges --build=binary &gt;../linux-5.11.0_5.11.0-1_amd64.changes\ndpkg-genchanges: info: binary-only upload (no source code included)\n dpkg-source --after-build .\ndpkg-buildpackage: info: binary-only upload (no source included)\n$ ls -1s ../linux*.deb\n  7932 ../linux-headers-5.11.0_5.11.0-1_amd64.deb\n728724 ../linux-image-5.11.0-dbg_5.11.0-1_amd64.deb\n 52136 ../linux-image-5.11.0_5.11.0-1_amd64.deb\n  1124 ../linux-libc-dev_5.11.0-1_amd64.deb\n\n\n\nbuild\u3057\u3066\u6210\u529f\u3059\u308b\u3068\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u751f\u6210\u3055\u308c\u307e\u3059\uff0e\n\n\nCPU i5-3320M/RAM 16GB/SATA SSD\u306e\u74b0\u5883\u3067200\u5206\u7a0b\u304b\u304b\u308a\u307e\u3057\u305f\uff0e\u5225\u306e\u4f5c\u696d\u3092\u3057\u306a\u304c\u3089\u3060\u3068\u3055\u3089\u306b\u6642\u9593\u304c\u4f38\u3073\u307e\u3059\uff0e\n\n\n\n\nkernel\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u5c0e\u5165\n\n\n\n$ sudo apt install ../linux-image-5.11.0_5.11.0-1_amd64.deb ../linux-libc-dev_5.11.0-1_amd64.deb ../linux-headers-5\n.11.0_5.11.0-1_amd64.deb\n\n\n\n\u51fa\u6765\u4e0a\u304c\u3063\u305fkernel\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u5c0e\u5165\u3057\u307e\u3059\uff0e\n\n\n\n\n\u53e4\u3044kernel\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u524a\u9664\n\n\n\u53e4\u3044\u4f7f\u308f\u306a\u304f\u306a\u3063\u305fKernel\u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u30c7\u30a3\u30b9\u30af\u3092\u6d88\u8cbb\u3059\u308b\u306e\u3067(\u7279\u306b /boot )\u524a\u9664\u3057\u307e\u3057\u3087\u3046\n\n\n\n$ dpkg -l linux-image* | grep ^ii\nii  linux-image-5.10.0-4-amd64          5.10.19-1          amd64        Linux 5.10 for 64-bit PCs (signed)\nii  linux-image-5.11.7                  5.11.7-2           amd64        Linux kernel, version 5.11.7\nii  linux-image-5.11.8+                 5.11.8+-3          amd64        Linux kernel, version 5.11.8+\n$ sudo apt purge linux-image-5.11.7\n\n\n\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u78ba\u8a8d\u3057\u3066\u53e4\u3044\u3082\u306e\u3092\u524a\u9664\u3057\u307e\u3059\uff0e\n\n\n\n\nMachine Owner Key\u3067\u7f72\u540d\u3059\u308b(\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u3092\u4f7f\u308f\u306a\u3044\u5834\u5408\u306f\u30b9\u30ad\u30c3\u30d7)\n\n\n\u524d\u3082\u3063\u3066MOK(Machine Owner Key)\u306e\u7528\u610f\u3092\u3057\u3066\u8a2d\u5b9a\u3057\u3066\u304a\u304d\u307e\u3059\uff0eMOK\u306e\u4f5c\u6210\u306b\u3064\u3044\u3066\u306f\u3053\u3061\u3089\u3092\uff0e\n\n\n\nSecureBoot &#8211; Debian Wiki\n\n\n\n\n$ sudo sbsign --key ~/MOK.priv --cert ~/MOK.pem /boot/vmlinuz-5.11.0 --output vmlinuz-5.11.0\n$ sudo mv ./vmlinuz-5.11.0 /boot/vmlinuz-5.11.0\n\n\n\nKernel\u306b\u7f72\u540d\u3057\u307e\u3059\uff0e\n\u3053\u3053\u3067\u306f\u4f5c\u6210\u3057\u305fMOK\u306e\u9375( ~/MOK.priv )\u3068\u8a3c\u660e\u66f8( ~/MOK.pem )\u3092\u4f7f\u3044\uff0c /boot/vmlinuz-5.11.0 \u306b\u7f72\u540d\u3057\u3066\u5dee\u3057\u66ff\u3048\u3066\u3044\u307e\u3059\uff0e\n\n\n\n$ find /lib/modules/5.11.0/updates/dkms/ -type f -print0 | xargs -0 -n1 sudo ./scripts/sign-file sha256 ~/MOK.priv ~/MOK.der\n\n\n\nDKIM\u3067\u4f5c\u3089\u308c\u305f\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u3082\u7f72\u540d\u3057\u307e\u3059\uff0e\n\n\n\n\u8ffd\u8a18 20210830)\n\n\n/etc/dkms/sign_helper.sh \u3068\u3044\u3046\u30d5\u30a1\u30a4\u30eb\u304c\u3042\u308a\u307e\u3057\u305f\uff0e\n\n\n/etc/dkms/sign_helper.sh\n\n#!/bin/sh\n/lib/modules/\"$1\"/build/scripts/sign-file sha512 /root/mok.priv /root/mok.der \"$2\"\n\n\n\nMOK\u306e\u30d5\u30a1\u30a4\u30eb\u3092 /root/mok/priv, /root/mok.der, /root/mok.pem \u3068\u3057\u3066\u304a\u304f\u3068 dkms \u5b9f\u884c\u6642\u306b\u81ea\u52d5\u7684\u306b\u7f72\u540d\u3057\u3066\u304f\u308c\u308b\u3088\u3046\u3067\u3059\uff0ekernel install\u6642\u3060\u3051\u3067\u306a\u304f dkms \u66f4\u65b0\u6642\u306a\u3069\u306b\u3082\u81ea\u52d5\u5b9f\u884c\u3057\u3066\u304f\u308c\u308b\u306e\u3067\u7f72\u540d\u3057\u5fd8\u308c\u304c\u7121\u304f\u306a\u3063\u3066\u52a9\u304b\u308a\u307e\u3059\uff0e\n\n\nchangelog \u3092\u898b\u308b\u3068 dkms 2.8.3-3 \u304b\u3089\u5165\u3063\u305f\u3088\u3046\u3067\u3059\uff0e\n\n\n/usr/share/doc/dkms/changelog.Debian.gz\n\ndkms (2.8.3-3) unstable; urgency=medium\n\n  * dynamically generate breaks for shim-signed in Ubuntu and Derivates\n\n -- Gianfranco Costamagna &lt;locutusofborg@debian.org&gt;  Wed, 29 Jul 2020 10:30:50 +0200\n\n\n\n\n\n\n\n\n\u518d\u8d77\u52d5\u3057\u3066\u53cd\u6620\n\n\n\u3046\u307e\u304f\u884c\u3051\u3070\u65b0\u3057\u3044Kernel\u3067\u8d77\u52d5\u3067\u304d\u307e\u3059\uff0e\n\u3046\u307e\u304f\u884c\u304b\u306a\u3044\u5834\u5408\u306f\u53e4\u3044Kernel\u3067\u8d77\u52d5\u3057\u3066\u8a2d\u5b9a\u3057\u76f4\u3057\u307e\u3057\u3087\u3046\uff0e\n\n\n\n\npatch\n\n\nkernel.org\u306b\u306f\u30d1\u30c3\u30c1\u304c2\u7a2e\u985e\u3042\u308a\u307e\u3059\uff0en.y.0\u304b\u3089\u306e\u7d2f\u7a4d\u30d1\u30c3\u30c1\u3068\u3059\u3050\u524d\u306e\u30d0\u30fc\u30b7\u30e7\u30f3\u304b\u3089\u306e\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30eb\u30d1\u30c3\u30c1\u304c\u3042\u308a\u307e\u3059\uff0e\n\n\n\n$ sudo apt install patch\n\n\n\npatch \u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u5fc5\u8981\u306a\u306e\u3067\u5c0e\u5165\u3057\u3066\u304a\u304d\u307e\u3059\uff0e\n\n\n\u7d2f\u7a4dpatch\n\n\u4e0a\u3067\u306fKernel 5.11.0\u3092build\u3057\u307e\u3057\u305f\uff0eKernel 5.11.7\u3092\u9069\u7528\u3057\u307e\u3059\uff0e\n\n\n\n$ wget https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.11.8.xz\n\n\n\n\u9593\u304c\u7a7a\u3044\u3066\u3044\u308b\u306e\u3067\u7d2f\u7a4d\u30d1\u30c3\u30c1\u3092\u5165\u624b\u3057\u307e\u3059\uff0e\n\n\n\n$ cd linux-5.11\n$ xzcat ../patch-5.11.8.xz | patch -p1\n\n\n\nsource\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u79fb\u52d5\u3057\u3066\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3059\uff0e\n\n\n\u3042\u3068\u306f\u4e0a\u306e\u624b\u9806\u3068\u540c\u3058\u3067\u3059\uff0e\n\n\n\n\n\n\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30ebpatch\n\n\n\u6b21\u306b 5.11.7 \u304b\u3089 5.11.8 \u306e\u3088\u3046\u306b1\u3064\u3060\u3051\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u305f\u3044\u3068\u304d\u306e\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30eb\u30d1\u30c3\u30c1\u306e\u624b\u9806\u3067\u3059\uff0e\n\n\n\n$ wget https://cdn.kernel.org/pub/linux/kernel/v5.x/incr/patch-5.11.7-8.xz\n\n\n\n\u30a4\u30f3\u30af\u30ea\u30e1\u30f3\u30bf\u30eb\u30d1\u30c3\u30c1\u3092\u5165\u624b\u3057\u307e\u3059\uff0e\n\n\n\n$ cd linux-5.11\n$ xzcat ../patch-5.11.7-8.xz | patch -p1\n\n\n\nsource\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u79fb\u52d5\u3057\u3066\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3059\uff0e\n\n\n\u3042\u3068\u306f\u4e0a\u306e\u624b\u9806\u3068\u540c\u3058\u3067\u3059\uff0e\n\n\n\n\n\u74b0\u5883\n\n\n\n$ sudo lshw -c system -sanitize | head\ncomputer\n    description: Notebook\n    product: 23533KJ (LENOVO_MT_2353)\n    vendor: LENOVO\n    version: ThinkPad T430s\n    serial: [REMOVED]\n    width: 64 bits\n    capabilities: smbios-2.7 dmi-2.7 smp vsyscall32\n    configuration: administrator_password=disabled chassis=notebook family=ThinkPad T430s power-on_password=disabled sku=LENOVO_MT_2353 uuid=[REM\nOVED]\n  *-pnp00:00\n$ dpkg-query -W shim-signed-common shim-unsigned linux-*5.11.8* build-essential fakeroot\nbuild-essential 12.9\nfakeroot        1.25.3-1.1\nlinux-headers-5.11.8+   5.11.8+-3\nlinux-image-5.11.8+     5.11.8+-3\nshim-signed-common      1.33+15+1533136590.3beb971-7\nshim-unsigned   15+1533136590.3beb971-10\n$ lsb_release -dr\nDescription:    Debian GNU/Linux bullseye/sid\nRelease:        unstable\n$ uname -smr\nLinux 5.11.8+ x86_64",
            "date_published": "2021-03-23T22:04:37+09:00",
            "date_modified": "2021-08-30T19:04:26+09:00",
            "authors": [
                {
                    "name": "matoken",
                    "url": "https://matoken.org/blog/author/matoken/",
                    "avatar": "https://secure.gravatar.com/avatar/38f5f3b575c5eb45cda6aa659bca119ac7a5e16b46565e869d0030e3bd66981d?s=512&d=mm&r=g"
                }
            ],
            "author": {
                "name": "matoken",
                "url": "https://matoken.org/blog/author/matoken/",
                "avatar": "https://secure.gravatar.com/avatar/38f5f3b575c5eb45cda6aa659bca119ac7a5e16b46565e869d0030e3bd66981d?s=512&d=mm&r=g"
            },
            "tags": [
                "kernel",
                "secureboot",
                "Debian",
                "Linux",
                "sid"
            ]
        }
    ]
}