GNOME Software Integration#

The Gnome Software installation is geared towards non technical users and installs only the desktop part of the driver, leaving the compute components out. The process guides the user on installing the driver and also enrolling the Secure Boot keys.

At the moment this process is enabled for the following distributions:

  • Red Hat Enterprise Linux 10 / Rocky Linux 10

  • Fedora 42

This requires to have the NVIDIA repository already configured/added to have the information appear in GNOME Software as part of the PackageKit downloads.

Driver Installation#

  1. After adding the NVIDIA repository, search for “nvidia driver”:

    _images/gnome-software-search.png

    • If nothing is found, then run the following command to force a PackageKit metadata refresh out of its normal regular schedule:

      # pkcon refresh force

  2. Click on the NVIDIA Graphics Driver item.

  3. Click on the Install button and insert the Administrator password (root).

    Note

    Multiple repositories can provide the same metadata for the same package set. The driver is also shipped by RPMFusion and other repositories; so you must select the CUDA repository from the top right drop down menu under the Install button.

    _images/gnome-software-driver.png

  4. The installation will now begin. You can check the progress below the greyed out button.

    _images/gnome-software-install.png

Secure Boot Preparation#

  1. Once the driver is installed, the button will switch to Enable…. Click on the button.

    _images/gnome-software-secure-boot-1.png

  2. The next screen you will be presented with the MOK enrollment prompt.

    • Note down the number. This will be the MOK password used later.

    • Check the I have made a note of the MOK password box.

    • Click Next.

    _images/gnome-software-secure-boot-2.png

  3. Click the Restart & Enroll MOK button.

    • You will be asked again for the Administrator password (root) and the system will restart.

    _images/gnome-software-secure-boot-3.png

Then, you can proceed to enroll the locally generated MOK. Refer to the Machine Owner Key Enrollment section to proceed.

Machine Owner Key Enrollment#

Note

This section is a copy of what is published on Fedora’s Machine Owner Key enrollment documentation page.

In order to successfully reboot after the NVIDIA driver installation, you have to enroll the Machine Owner Key you created during installation in GNOME Software. During rebooting you’ll be presented with the mokutil tool:

  1. Press any key to begin.

    https://docs.fedoraproject.org/en-US/quick-docs/_images/mok-util-01.png

  2. Select Enroll MOK:

    https://docs.fedoraproject.org/en-US/quick-docs/_images/mok-util-02.png

  3. Select Continue to proceed:

    https://docs.fedoraproject.org/en-US/quick-docs/_images/mok-util-03.png

  4. Select Yes to enroll the key.

    https://docs.fedoraproject.org/en-US/quick-docs/_images/mok-util-04.png

  5. Type the MOK password you created for the key during installation.

    Note

    Please note that there will be no feedback on the screen as you type the characters.

    https://docs.fedoraproject.org/en-US/quick-docs/_images/mok-util-05.png

  6. Select Reboot to reboot into the operating system with the NVIDIA drivers and Secure Boot enabled.

    https://docs.fedoraproject.org/en-US/quick-docs/_images/mok-util-06.png

Uninstallation#

  1. Remove the driver by clicking Uninstall in the GNOME Software window:

    _images/gnome-software-uninstall-1.png

  2. In the uninstall prompt, click again on the Uninstall button,

    • Enter the Administrator password (root) and GNOME Software will proceed to uninstall the driver:

    _images/gnome-software-uninstall-2.png

  3. Optionally, you can remove the enrolled MOK by typing the following command in a terminal:

    # mokutil --delete /var/lib/dkms/mok.pub