Let’s build a simple Linux kernel module in C. I tend to use this to test a Secure Boot setup as you’ll be able to see the errors from loading an unsigned module into a kernel where the system requires all kernel modules to be signed. This could also be used as a jumping off point to building an actual kernel module using C.

After installing Debian the first thing I’m going to do is set up Secure Boot. Usually, I’ll start with Secure Boot since some other setup and configuration requires the signing of kernel modules and I like keeping Secure Boot itself out of the equation when those steps come up.

A step-by-step guide to installing Debian with Secure Boot, custom signed modules, LUKS Full Disk Encryption with TPM2 auto-unlock, and installation of the DKMS NVIDIA driver. There are also a few other random tidbits along the way that may prove to be useful depending on your specific needs.