$ sudo sbsign --key ~root/MOK.priv --cert ~root/MOK.pem /boot/vmlinuz-5.17.0-yoga260 --output ~root/vmlinuz
Signing Unsigned original image
$ sudo mv ~root/vmlinuz /boot/vmlinuz-5.17.0-yoga260

/etc/dkms/framework.conf の sign_tool を設定しておくと dkmsへの署名を自動でしてくれる

diff --git a/dkms/framework.conf b/dkms/framework.conf
index 896ee93..d6012dc 100644
--- a/dkms/framework.conf
+++ b/dkms/framework.conf
@@ -29,4 +29,4 @@

 ## Script to sign modules during build, script is called with kernel version
 ## and module name
-# sign_tool="/etc/dkms/sign_helper.sh"
+sign_tool="/etc/dkms/sign_helper.sh"

MOKファイルは以下に合わせる．(シンボリックリンクok)

$ cat /etc/dkms/sign_helper.sh
#!/bin/sh
/lib/modules/"$1"/build/scripts/sign-file sha512 /root/mok.priv /root/mok.der "$2"

• https://wiki.matoken.org/linux/debian/bullseye/linux-5.16
• https://wiki.matoken.org/linux/debian/bullseye/linux-5.15