nVidia driver and bumblebee not working in fedora 21

edit

The problem is that you have a UEFI firmware and you are booting linux in a mode where the kernel requires that each kernel module that is loaded be cryptographicaly signed. When you use bumblebee-nvidia to compile the nvidia kernel driver it does it in --quiet mode, which prevents the nvidia kernel module compile script from prompting you to sign the kernel module.

Here is a dirty hack that I used to get it working on my system.

1) As root, open the script /usr/sbin/bumblebee-nvidia in your favorite editor

2) Find the line where it calls nvidia-installer -- there will be two instances, edit the --quiet out of the one that comes after the else (the non-debug line). Also remove the > redirect and everything that comes after it on the line.

3) As root, run bumblebee-nvidia. This will compile the driver. With the modified script, you will see the TUI nvidia compiler script prompts. When prompted to sign the kernel module, elect to do so. Also elect to save the .der key file. You can let it delete the private key. Towards the end it may complan about not being able to load the kernel module yet. This is fine. I also got a few errors about some libraries being write protected. This is also fine.

4) Now that the kernel module has been built and the .der public key file created, you must install the signature in your firmware. Use the mokutil utility to install the .der keyfile that was created. The key file will be located in /usr/share/nvidia and called something like nvidia-modsign-crt-XXXXXXXX.der, where XXXXXXXX is a hex code that is unique. Run mokutil like this, as root

mokutil --import /usr/share/nvidia/nvidia-modsign-crt-XXXXXXXX.der

where you replace the XXXXXXXX with the numbers and letters that actually appear in your .der file (tab complete is your friend). You can choose any password you like here. You only have to remember it for a little while.

5) Reboot. On boot your firmware should allow you to activate the new key. I had to press a key, then select something from a menu (I forget, but it seemed obvious) then enter the password I set in step 4. Then let the system boot normally.

6) Viola! The nvidia.ko module is loaded, and the bumblebee deamon is able to run.

Now, this isn't great, because next time you update your kernel you'll have to do this again. Also, if the bumblebee package gets updated (or you want a new nvidia driver) you will have to do this again. It should really be automated, but I'm not sure what the best method of doing that is.

If you have a laptop where you can turn off secureboot, then that may be prefereable. It's not always possible though.

Grabbed this text from another ask question, probably same issue.