There are two ways to get the nvidia kernel driver. One option is to compile it from scratch on the users machine with dkms. THe other option is to install a metapackage linux-modules-nvidia for the appropriate kernel flavour and the appropriate nvidia revsision which provides a prebuild, not linked, and secureboot signed nvidia module.
So as to why.... the dkms one will not work or load on secureboot machines, unless one goes through cryptic MOK key enrollment procedure during boot.
The secureboot signed nvidia module works on secureboot machines without any additional steps by the user.
But the caveat is that the secureboot signed ones must be kept in correct tandem with the kernel flavour & nvidia revisions.
Anything you install from the PPA will not be secureboot signed, and thus need MOK signing.
Can you please provide the output of:
$ sudo ubuntu-drivers list
In the live session?
There are two ways to get the nvidia kernel driver. One option is to compile it from scratch on the users machine with dkms. THe other option is to install a metapackage linux-modules- nvidia for the appropriate kernel flavour and the appropriate nvidia revsision which provides a prebuild, not linked, and secureboot signed nvidia module.
So as to why.... the dkms one will not work or load on secureboot machines, unless one goes through cryptic MOK key enrollment procedure during boot.
The secureboot signed nvidia module works on secureboot machines without any additional steps by the user.
But the caveat is that the secureboot signed ones must be kept in correct tandem with the kernel flavour & nvidia revisions.
Anything you install from the PPA will not be secureboot signed, and thus need MOK signing.