Sign VirtualBox modules for Secure Boot on Fedora 37. See https://gist.github.com/reillysiemens/ac6bea1e6c7684d62f544bd79b2182a4

sign-vbox-modules

#!/bin/sh
# /usr/local/sbin/sign-vbox-modules

readonly hash_algo='sha256'
readonly key='/root/module-signing/MOK.priv'
readonly x509='/root/module-signing/MOK.der'

# The exact location of `sign-file` might vary depending on your platform.
alias sign-file="/usr/src/kernels/$(uname -r)/scripts/sign-file"

if [ -z "${KBUILD_SIGN_PIN}" ]; then
  echo -n "Passphrase for ${key}: "
  read -s KBUILD_SIGN_PIN
  echo
fi
export KBUILD_SIGN_PIN

for module in $(dirname $(modinfo -n vboxdrv))/*.ko.xz; do
  echo "Signing ${module} ..."
  xz -d "${module}"
  sign-file "${hash_algo}" "${key}" "${x509}" "${module%.*}"
  xz "${module%.*}"
done