[Bug 1208939] New: NVIDIA, no more opencl and cuda
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 Bug ID: 1208939 Summary: NVIDIA, no more opencl and cuda Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs@suse.de Reporter: epistemepromeneur@free.fr QA Contact: sndirsch@suse.com Found By: --- Blocker: --- I use fah app (scientific computing). It needs opencl and cuda. I use my nvidia card(GT 1030) only for computing. Today 2023/03/04 I get a current updated with packagekit. After restarting PC, fah service does not find opencl and cuda. I deleted all the nvidia packages, then reinstalled them by installing nvidia-drivers-minimal-G06 package. I restarted the PC. No success. Fah does not find any opencl or cuda. Also : ��� there is no more "GPU current" temp sensor. ��� the gkrellm plugin "nvidia" using SMI does not supply any temp and frequency. kde kcm "data center" does not find opencl. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c1 --- Comment #1 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- Created attachment 865282 --> http://bugzilla.opensuse.org/attachment.cgi?id=865282&action=edit nvidia installed packages -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c2 Stefan Dirsch <sndirsch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High Status|NEW |IN_PROGRESS CC| |epistemepromeneur@free.fr Assignee|gfx-bugs@suse.de |sndirsch@suse.com Flags| |needinfo?(epistemepromeneur | |@free.fr) Severity|Normal |Critical --- Comment #2 from Stefan Dirsch <sndirsch@suse.com> --- I guess this is the change in our kernel for 6.2.1 to no longer load unsigned kernel modules. :-( In order to verify this either boot an older kernel or disable Secureboot in your Firmware/BIOS. But I see you're trying to use the openGPU driver from nvidia now. AFAIK GT1030 is still Pascal architecture, which is not supported by this driver. You would need to select nvidia-driver-G06-kmp-default instead and remove again nvidia-open-driver-G06-signed-kmp-default and kernel-firmware-nvidia-gsp-G06. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c3 --- Comment #3 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- I disabled "secure boot" same result : no opencl or cuda -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c4 --- Comment #4 from Episteme PROMENEUR <epistemepromeneur@free.fr> ---
But I see you're trying to use the openGPU driver from nvidia now. AFAIK >>GT1030 is still Pascal architecture, which is not supported by this driver. >>You would need to select nvidia-driver-G06-kmp-default instead and remove >>again nvidia-open-driver-G06-signed-kmp-default and kernel-firmware-nvidia-gsp-G06.
I did not install these packages. I just selected nvidia-drivers-minimal-G06 package. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c5 --- Comment #5 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to Episteme PROMENEUR from comment #4)
But I see you're trying to use the openGPU driver from nvidia now. AFAIK >>GT1030 is still Pascal architecture, which is not supported by this driver. >>You would need to select nvidia-driver-G06-kmp-default instead and remove >>again nvidia-open-driver-G06-signed-kmp-default and kernel-firmware-nvidia-gsp-G06.
I did not install these packages. I just selected nvidia-drivers-minimal-G06 package.
... which then selected and installed these. %package -n nvidia-drivers-minimal-G06 Summary: Meta package for compute only installations Group: System/X11/Utilities Requires: nvidia-compute-utils-G06 Requires: nvidia-compute-G06 Requires: (nvidia-driver-G06-kmp = %{version} or nvidia-open-driver-G06-kmp = %{version} or nvidia-open-driver-G06-signed-kmp = %{version}) %description -n nvidia-drivers-minimal-G06 This is just a Meta package for compute only installations. Please try what I told you. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c6 --- Comment #6 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- Now : - secureboot is disabled - the required packages are installed - the non compliant packages are no more installed. success : fah detects opencl and cuda. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 Stefan Dirsch <sndirsch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|NVIDIA, no more opencl and |Kernel 6.2.1 update no |cuda |longer loads unsigned | |kernel modules Flags|needinfo?(epistemepromeneur | |@free.fr) | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c7 Stefan Dirsch <sndirsch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #7 from Stefan Dirsch <sndirsch@suse.com> --- Ok. Hopefully this is fixed now with the following changes. ------------------------------------------------------------------- Sat Mar 4 19:33:22 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - sign kernel modules also on TW (boo#1208939) ------------------------------------------------------------------- Fri Feb 17 04:58:32 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - moved cuda-drivers provides to nvidia-compute-utils-G06 Updated packages should be available soon. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c8 --- Comment #8 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- What does it means ? Can we enable secure boot ? Can we use nvidia-drivers-minimal-G06 package with a GT 1030 ? A secondary question : when proceeding a headless installation we don't get anymore the adapter sensors and the app ���NVIDIA settings���. It would be a good thing to get them again, perhaps with a separate package. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c9 --- Comment #9 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to Episteme PROMENEUR from comment #8)
What does it means ?
Can we enable secure boot ?
Yes.
Can we use nvidia-drivers-minimal-G06 package with a GT 1030 ?
Since it selects the open driver by default at least on your system (not sure why; maybe you can taboo it via zypper lock) the answer is no. What you can try is zypper in --no-recommends nvidia-compute-utils-G06 nvidia-driver-G06-kmp-default
A secondary question : when proceeding a headless installation we don't get anymore the adapter sensors
Not sure what you mean with that. Special app? Maybe
and the app ���NVIDIA settings���. It would be a good thing to get them again, perhaps with a separate package.
nvidia-settings is now in nvidia-utils-G06 package due to its dependancies -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c10 --- Comment #10 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- "headless" installation of the driver <=> minimal installation for computing -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c11 --- Comment #11 from Stefan Dirsch <sndirsch@suse.com> --- Sorry, I don't understand what you mean with "adapter sensors". -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c12 --- Comment #12 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- The sensor of the nvidia card for delivering temp for example. to get temp we need to install the video driver -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c13 --- Comment #13 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to Episteme PROMENEUR from comment #12)
The sensor of the nvidia card for delivering temp for example.
to get temp we need to install the video driver
Which video driver? You mean the X driver? This sounds weird. So which file is missing here? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c14 --- Comment #14 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- I don't know which part to install to get sensors. I know only if I proceed a minimal installation for computing then i get no more any sensor to display with gkrellm. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c15 --- Comment #15 from Stefan Dirsch <sndirsch@suse.com> --- I can see the temperature in the output of 'nvidia-smi' which is part of nvidia-compute-utils-G06. So together with nvidia-driver-G06-kmp-default I don't see what's missing here ... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c16 --- Comment #16 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- We can get temp, fans etc. without using SMI. Gkrellm detects not any sensors with a minimal installation. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c17 --- Comment #17 from Stefan Dirsch <sndirsch@suse.com> --- gkrellm is a desktop app. So of course it needs some video driver. But I had the impression you had some different gfx card (internal Intel probably) for your desktop and used the nvidia card just for CUDA/OpenCL. No idea what gkrellm does. If it checks the temperature of the gfx card currently in use for the desktop or also additional nvidia gfx cards. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c18 --- Comment #18 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to Episteme PROMENEUR from comment #16)
We can get temp, fans etc. without using SMI.
Gkrellm detects not any sensors with a minimal installation.
I don't force anybody to make use of the minimal installation. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c19 --- Comment #19 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- If I made a full installation of the NVIDIA card along the Intel iGPU and i don't use the NVIDIA card for the monitor, just for computing, there is no sensor problem. Gkrellm detects the nvidia sensors for displaying temp, fan, etc. that's why I say sensor part installation is missing with a minimal installation. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c20 --- Comment #20 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- I just say that for computing, it is useful to know GPU core temp, fan speed, etc. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c21 --- Comment #21 from Stefan Dirsch <sndirsch@suse.com> --- Then I guess it's some library in nvidia-gl-G06 or nvidia-video-G06, which is needed by gkrellm. You could try to figure out which one ... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c22 --- Comment #22 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- I installed nvidia-gl-G06. No sensors. Then certainly the sensor part is in nvidia-video-G06. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c23 --- Comment #23 from Stefan Dirsch <sndirsch@suse.com> --- Hmm. Interesting. That would be one of these: rpm -qpl nvidia-video-G06-525.89.02-7.1.x86_64.rpm /usr/lib64/gbm /usr/lib64/gbm/nvidia-drm_gbm.so /usr/lib64/libnvcuvid.so /usr/lib64/libnvcuvid.so.1 /usr/lib64/libnvcuvid.so.525.89.02 /usr/lib64/libnvidia-allocator.so.1 /usr/lib64/libnvidia-allocator.so.525.89.02 /usr/lib64/libnvidia-encode.so.1 /usr/lib64/libnvidia-encode.so.525.89.02 /usr/lib64/libnvidia-opticalflow.so.1 /usr/lib64/libnvidia-opticalflow.so.525.89.02 /usr/lib64/libvdpau_nvidia.so /usr/lib64/vdpau /usr/lib64/vdpau/libvdpau_nvidia.so.1 /usr/lib64/vdpau/libvdpau_nvidia.so.525.89.02 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c24 --- Comment #24 from Stefan Dirsch <sndirsch@suse.com> --- Ok. ChatGPT just told me that gkrellm uses nVidia's XNVCtrl Xserver extension tp display the temperature. I'm not sure how this extension gets added to the Xserver. Either by loading nVidia's glx extension or the X driver itself. But both are in nvidia-gl-G06. /usr/lib64/xorg/modules/extensions/libglxserver_nvidia.so.525.89.02 /usr/lib64/xorg/modules/drivers/nvidia_drv.so You can check that with xdpyinfo. One of the extension will be called 'XNVCtrl' or similar. So of course after installing nvidia-gl-G06 you also need to restart the Xserver. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c25 --- Comment #25 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- I don't understand how to use xdpyinfo. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c26 --- Comment #26 from Stefan Dirsch <sndirsch@suse.com> --- Just run it in a terminal on the desktop. I was wrong. The extension, which are added by NVIDIA are NV-CONTROL NV-GLX So I think NV-CONTROL is what is being used by gkrellm (using the XNVCtrl library). -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c27 --- Comment #27 from Stefan Dirsch <sndirsch@suse.com> --- BTW, I only found a gkrellm plugin, which we don't ship AFAIK. https://github.com/carcass82/gkrellm-nvidia But this now switched from XNVCtrl library is to NVML ... This begs the question where your gkrellm is coming from ... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c28 --- Comment #28 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- With Yast software manager, I found a ���libXNVCtrl0��� 510.47.03 package. There is not any 525.89 version. Perhaps a solution ? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c29 --- Comment #29 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- My gkrellm is coming from tumbleweed main repo OSS. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c30 --- Comment #30 from Stefan Dirsch <sndirsch@suse.com> --- Ok. Just figured out that gkrellm uses 'nvidia-settings' tool internally to display the temperature. This is in package nvidia-utils-G06. But of course you still need also nvidia-gl-G06 since 'nvidia-settings' also used NV-CONTROL Xserver extension. But with that this is no longer a minimal installation. ;-) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c31 --- Comment #31 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- NVML is used by SMI. Then it is installed with a minimal installation just for computing. If we can't separate the sensor part of the Nvidia driver, perhaps it is possible to create fake sensors. These sensors would deliver temp, fan speed, frequency etc. These fake sensors would use SMI to deliver the values. The "nvidia" plugin of gkrellm does not create fake sensors, but just display in Gkrellm the output of SMI. This plugin can inspire a developper to cretae fake sensors. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c32 --- Comment #32 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- there is /usr/lib64/libnvidia-ml.so /usr/lib64/libnvidia-ml.so.1 /usr/lib64/libnvidia-ml.so.525.89.02 in nvidia-compute-G06 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c33 --- Comment #33 from Stefan Dirsch <sndirsch@suse.com> --- Well, so why not use SMI from the beginning for this purpose? As I told you 'nvidia-smi' can tell you the temperature without the need for NV-CONTROL/libXNVCtrl0 interface. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c34 --- Comment #34 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to Episteme PROMENEUR from comment #32)
there is
/usr/lib64/libnvidia-ml.so /usr/lib64/libnvidia-ml.so.1 /usr/lib64/libnvidia-ml.so.525.89.02
in nvidia-compute-G06
Yes, nvidia-smi needs it. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c35 --- Comment #35 from Stefan Dirsch <sndirsch@suse.com> --- I think this gkrellm Plugin making using of NVML (I guess it's just using libnvida-ml, but I didn't check this) is the right approach here. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c36 --- Comment #36 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- Because SMI is not a monitoring tool. A monitoring tool display permanently, in an easy way on my desktop, various values as Gkrellm does. Gkrellm "nvidia" plugin runs well. But it is a workaround. It works only with Gkrellm. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c37 --- Comment #37 from Stefan Dirsch <sndirsch@suse.com> --- Obviously it does ... https://github.com/carcass82/gkrellm-nvidia/blob/master/Makefile [...] LDLIBS += -lX11 -lnvidia-ml [...] -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c38 --- Comment #38 from Episteme PROMENEUR <epistemepromeneur@free.fr> --- What "Obviously it does" ? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c39 --- Comment #39 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to Episteme PROMENEUR from comment #36)
Because SMI is not a monitoring tool.
A monitoring tool display permanently, in an easy way on my desktop, various values as Gkrellm does.
Gkrellm "nvidia" plugin runs well. But it is a workaround. It works only with Gkrellm.
Feel free to improve the situation. I currently don't see how changing the packaging would help here. Minimal installation should not have any deps to X libs or even Xserver. Period. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c40 --- Comment #40 from Stefan Dirsch <sndirsch@suse.com> --- That was an additional comment to comment#35 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c41 Stefan Dirsch <sndirsch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |brunopitrus@hotmail.com --- Comment #41 from Stefan Dirsch <sndirsch@suse.com> --- *** Bug 1208966 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c42 dziobian <brunopitrus@hotmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #42 from dziobian <brunopitrus@hotmail.com> --- I built and installed the updated nvidia-driver-G06-kmp-default and it did not work for me. I noticed you've added some stuff using mokutil. I do not use shim for booting, instead have dracut configured to produce signed .efi images containing kernel + initramfs (the `uefi_secureboot_cert` option) Is there anything i can do (most likely add something to `kernel_cmdline`) to make this work in such a setup? (Disabling signature enforcement in kernel would be fine for me, as the initramfs is signed while the system drive is under FDE) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c43 Stefan Dirsch <sndirsch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |IN_PROGRESS --- Comment #43 from Stefan Dirsch <sndirsch@suse.com> --- (In reply to dziobian from comment #42)
I built and installed the updated nvidia-driver-G06-kmp-default and it did not work for me.
Repositories haven't been updated with my changes yet.
I noticed you've added some stuff using mokutil.
Yes, but today I noticed that my changes simple don't help. Looks like things need to be done differently with TW kernels than with kernels on openSUSE Leap. :-(
I do not use shim for booting, instead have dracut configured to produce signed .efi images containing kernel + initramfs (the `uefi_secureboot_cert` option)
Is there anything i can do (most likely add something to `kernel_cmdline`) to make this work in such a setup?
(Disabling signature enforcement in kernel would be fine for me, as the initramfs is signed while the system drive is under FDE)
Honestly I'm not an expert on this area. So I'm afraid I can't help you here. :-( -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 Dmitry Markov <werwolf131313@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |werwolf131313@gmail.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 dziobian <brunopitrus@hotmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jlee@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c44 --- Comment #44 from Joey Lee <jlee@suse.com> --- (In reply to dziobian from comment #42)
I built and installed the updated nvidia-driver-G06-kmp-default and it did not work for me. I noticed you've added some stuff using mokutil. I do not use shim for booting, instead have dracut configured to produce signed .efi images containing kernel + initramfs (the `uefi_secureboot_cert` option)
Is there anything i can do (most likely add something to `kernel_cmdline`) to make this work in such a setup?
(Disabling signature enforcement in kernel would be fine for me, as the initramfs is signed while the system drive is under FDE)
Without shim which means without MOK, the only way is rebuild kernel and put the public key of nvidia-driver-G06-kmp-default to kernel. Or disable secure boot. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1208939 http://bugzilla.opensuse.org/show_bug.cgi?id=1208939#c45 --- Comment #45 from Joey Lee <jlee@suse.com> --- (In reply to Joey Lee from comment #44)
(In reply to dziobian from comment #42)
I built and installed the updated nvidia-driver-G06-kmp-default and it did not work for me. I noticed you've added some stuff using mokutil. I do not use shim for booting, instead have dracut configured to produce signed .efi images containing kernel + initramfs (the `uefi_secureboot_cert` option)
Is there anything i can do (most likely add something to `kernel_cmdline`) to make this work in such a setup?
(Disabling signature enforcement in kernel would be fine for me, as the initramfs is signed while the system drive is under FDE)
Without shim which means without MOK, the only way is rebuild kernel and put the public key of nvidia-driver-G06-kmp-default to kernel.
Or disable secure boot.
Another approach, maybe we can try to enable CONFIG_SYSTEM_EXTRA_CERTIFICATE in openSUSE Tumbleweed kernel. As I remember, it will reserve a space for user to enroll public key to the space, then user needs to re-sign kernel by him self. So user doesn't need to re-compiler kernel to embedded public key. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com