On Thu, Jan 09, 2025 at 11:52:27AM +0100, Arnout Engelen wrote: > On Fri, 3 Jan 2025 17:37:52 -0800, Luis Chamberlain wrote: > > What distro which is using module signatures would switch > > to this as an alternative instead? > > In NixOS, we disable MODULE_SIG by default (because we value > reproducibility over having module signatures). Enabling > MODULE_HASHES on systems that do not need to load out-of-tree > modules would be a good step forward. > Mentioning this in the cover letter will also be good. So two distros seemt to want this. Luis