I recently bought a laptop with a Nvidia Optimus GPU. During the installation of the Fedora Nvidia driver, I made a hard-earned discovery: the RPMFusion Nvidia driver is not cryptographically signed. This means I kept getting tainted kernel warnings, along with the Intel GPU driver, until I disabled Secure Boot. While that may not seem consequential, it does render the Windows drive unbootable if I don’t have my Bitlocker Key handy. If I leave Secure Boot enabled and try to boot Fedora, I get a usable but unaccelerated desktop.
In contrast, other distros provide signed Nvidia drivers. So this presents me with a list of possible solutions and workarounds:
- Presumably the official proprietary driver is signed. I could install that, but the official Nvidia driver has its own drawbacks.
- Migrate to another distro. I do rather like Fedora, but some of my favorite desktops have proven unstable in version 33.
- Decrypt the Windows partition and leave it that way. Not a very attracive solution.
- Restrict gameplay to Windows only. This would leave a lot of unused space on my Fedora drive, and I like being able to stay in Linux most of the time.
Does anyone know of any other solutions? Which one makes the most sense to people? Am I overlooking anything?