From Fedora Project Wiki
 
(12 intermediate revisions by the same user not shown)
Line 26: Line 26:
<!-- After review, the Wrangler will move your page to Category:ChangeReadyForFesco... if it still needs more work it will move back to Category:ChangePageIncomplete-->
<!-- After review, the Wrangler will move your page to Category:ChangeReadyForFesco... if it still needs more work it will move back to Category:ChangePageIncomplete-->


[[Category:SystemWideChange]]
[[Category:SelfContainedChange]]


* Targeted release: [https://docs.fedoraproject.org/en-US/releases/f41/ Fedora Linux 41]
* Targeted release: [https://docs.fedoraproject.org/en-US/releases/f41/ Fedora Linux 41]
Line 36: Line 36:
ON_QA -> change is fully code complete
ON_QA -> change is fully code complete
-->
-->
* [https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/thread/APB5RDSUPKB6L4A3FPYJWVQGFFZRMUFK/ Announced]
* Announced
* [https://discussion.fedoraproject.org/t/f41-change-proposal-reproducible-package-builds-system-wide/112740 Discussion Thread]
* Discussion Thread
* FESCo issue: [https://pagure.io/fesco/issue/3201 #3201]
* FESCo issue:  
* Tracker bug: [https://bugzilla.redhat.com/show_bug.cgi?id=2279765 #2279765]
* Tracker bug:  
* Release notes tracker: <will be assigned by the Wrangler>
* Release notes tracker: <will be assigned by the Wrangler>


Line 47: Line 47:
What we're doing this time is using mokutil to create a key for the user to self-sign the drivers. When installing the drivers, the user is asked to provide a password for the key. On the next reboot the user is presented with the mokutil interface to enroll the key.
What we're doing this time is using mokutil to create a key for the user to self-sign the drivers. When installing the drivers, the user is asked to provide a password for the key. On the next reboot the user is presented with the mokutil interface to enroll the key.


=== Related Changes ===
See the [https://gitlab.gnome.org/GNOME/gnome-software/-/merge_requests/2034 upstream merge request] for more details and screenshots.


== Feedback ==
== Feedback ==
Line 53: Line 53:


== Benefit to Fedora ==
== Benefit to Fedora ==
 
The Nvidia drivers are necessary not only for gaming, but especially for CUDA and AI/LLM workloads. The Nvidia drivers can't be part of Fedora because of their license, but Fedora should offer an easy installation of them to stay relevant in the respective fields.


== Scope ==
== Scope ==


* Proposal Owners:
* Proposal Owners: The feature will be implemented in GNOME Software 47 and will be shipped in the gnome-software package in Fedora Linux 41.


* Other Developers:
* Other Developers: No work required from other Fedora developers. The only requirement outside of the scope of the proposal owners is to reintroduce AppStream metadata into the Nvidia driver repo on RPMFusion.org.


* Release Engineering:  
* Release Engineering:  
Line 67: Line 67:
* Trademark approval:
* Trademark approval:


* Alignment with Community Initiatives:  
* Alignment with Community Initiatives:


== Upgrade/compatibility impact ==
== Upgrade/compatibility impact ==
Line 74: Line 74:


== How To Test ==
== How To Test ==
1. Open GNOME Software.<br>
2. Reach for "nvidia".<br>
3. Choose the Nvidia driver, click Install and follow the prompts.<br>
4. Reboot and enroll the self-signing key in the mokutil tool following <<the documentation will be added>><br>
5. The OS should boot up with the Nvidia driver enabled.<br>


== User Experience ==
== User Experience ==


No impact is expected.
This change aims to improve user experience of installing the proprietary Nvidia driver.
 
== Dependencies ==
<!-- What other packages (RPMs) depend on this package?  Are there changes outside the developers' control on which completion of this change depends?  In other words, completion of another change owned by someone else and might cause you to not be able to finish on time or that you would need to coordinate?  Other upstream projects like the kernel (if this is not a kernel change)? -->
 
<!-- REQUIRED FOR SYSTEM WIDE CHANGES -->
 


== Contingency Plan ==
== Contingency Plan ==
 
If the feature is not implemented on time for Fedora Linux 41, we can simply remove AppStream metadata from the Nvidia driver repo and the driver will not show up in GNOME Software like in Fedora Linux 40.
 
 
<!-- If you cannot complete your feature by the final development freeze, what is the backup plan?  This might be as simple as "Revert the shipped configuration".  Or it might not (e.g. rebuilding a number of dependent packages).  If you feature is not completed in time we want to assure others that other parts of Fedora will not be in jeopardy. -->


== Documentation ==
== Documentation ==
 
The GNOME Software part is intuitive and doesn't require documentation. The mokutil part is less intuitive and will be documented in the Fedora Workstation section on docs.fedoraproject.org. The docs will be published when the feature lands in Fedora Linux 41.


== Release Notes ==
== Release Notes ==

Latest revision as of 13:49, 31 May 2024

Nvidia Driver Installation with Secure Boot Support

Summary

Nvidia Drivers have been removed from GNOME Software because it didn't support Secure Boot which is increasingly often enabled. This change brings the option back with Secure Boot supported.

Owner

  • Email: eischmann@redhat.com
  • Email: mcrha@redhat.com

Current status

  • Targeted release: Fedora Linux 41
  • Last updated: 2024-05-31
  • Announced
  • Discussion Thread
  • FESCo issue:
  • Tracker bug:
  • Release notes tracker: <will be assigned by the Wrangler>

Detailed Description

The goal is this change is to provide an easy way to install Nvidia drivers in Fedora Workstation. It was removed from GNOME Software because the original mechanism didn't support Secure Boot. When users installed the drivers with Secure Boot enabled, they could not boot the OS. What we're doing this time is using mokutil to create a key for the user to self-sign the drivers. When installing the drivers, the user is asked to provide a password for the key. On the next reboot the user is presented with the mokutil interface to enroll the key.

See the upstream merge request for more details and screenshots.

Feedback

Benefit to Fedora

The Nvidia drivers are necessary not only for gaming, but especially for CUDA and AI/LLM workloads. The Nvidia drivers can't be part of Fedora because of their license, but Fedora should offer an easy installation of them to stay relevant in the respective fields.

Scope

  • Proposal Owners: The feature will be implemented in GNOME Software 47 and will be shipped in the gnome-software package in Fedora Linux 41.
  • Other Developers: No work required from other Fedora developers. The only requirement outside of the scope of the proposal owners is to reintroduce AppStream metadata into the Nvidia driver repo on RPMFusion.org.
  • Release Engineering:
  • Policies and Guidelines:
  • Trademark approval:
  • Alignment with Community Initiatives:

Upgrade/compatibility impact

No impact is expected.

How To Test

1. Open GNOME Software.
2. Reach for "nvidia".
3. Choose the Nvidia driver, click Install and follow the prompts.
4. Reboot and enroll the self-signing key in the mokutil tool following <<the documentation will be added>>
5. The OS should boot up with the Nvidia driver enabled.

User Experience

This change aims to improve user experience of installing the proprietary Nvidia driver.

Contingency Plan

If the feature is not implemented on time for Fedora Linux 41, we can simply remove AppStream metadata from the Nvidia driver repo and the driver will not show up in GNOME Software like in Fedora Linux 40.

Documentation

The GNOME Software part is intuitive and doesn't require documentation. The mokutil part is less intuitive and will be documented in the Fedora Workstation section on docs.fedoraproject.org. The docs will be published when the feature lands in Fedora Linux 41.

Release Notes