On Thu, 29 Mar 2018 15:22:38 +0200, Hans-Peter Jansen wrote:
On Donnerstag, 29. März 2018 14:16:15 Takashi Iwai wrote:
On Thu, 29 Mar 2018 13:58:49 +0200,
Hans-Peter Jansen wrote:
On Mittwoch, 28. März 2018 17:26:14 Takashi Iwai wrote:
On Wed, 28 Mar 2018 17:03:29 +0200,
sigise@mailc.net wrote:
Yep, I made a mistake -- maybe just hit the wrong selection in grub menu
:-(
Anyway, on the machine I reported about
4.15.13-2.g950fc49-default
works. 4.15.13 installs after that
4.15.13-3.g12abbef-default 4.15.13-4.g580a38a-default
don't.
OK, that changes the picture completely. The only difference between the above is the kernel config change to enable module signing.
Suffering from a similar problem, here's a screenshot of the failure.
Kernel 4.15.10 works fine, while 4.15.13 does not.
Definitely something to do with the module signing Jiri recently enabled.
I'm tracking Kernel:stable in a local OBS.
Is it with your locally built kernel (to your own branch)? Or it's built in OBS Kernel:stable? There can be a difference, as both have different keys.
In my own local OBS, due to other evil stuff, that is needed as well (NVidia, Virtualbox, etc..). Linking from one BS to another has a few downsides, such as revision tracking isn't functional (well, it tracks my own local changes, nothing else..).
That explains the possible cause. I forgot the details, but there were changes and requirements relevant with signing with PKCS#7. Was it about the new pesign-obs-integration package? Slipped from my memory, sorry. Other guys can help in this regard, I hope. Takashi
Are you booting in secure boot mode?
Is there a way to disable this setting from the kernel command line?
It doesn't look so. "Module is not signed with expected PKCS#7" implies that a module is wrongly signed, and it's not the case ENOKEY or other error that can be ignored.
How do I correctly sign such builds? ATM, it looks, like enabling module signing renders my builds completely useless.
In anyway, adding Jiri and Joey to Cc, who have better clue.
Takashi San, thanks for your support. Much appreciated. Would be glad to here something from the guys with the clue stick, that turn my local builds bootable again.
Cheers, Pete
-- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kernel+owner@opensuse.org