2023-05-05 09:06:39

by Mirsad Todorovac

[permalink] [raw]
Subject: Re: [BUILD] [FOUND WORKAROUND] Unable to sign drivers on Ubuntu 22.04 LTS desktop

On 4.5.2023. 19:02, Mirsad Goran Todorovac wrote:
> Hi Bagas,
>
> I seem to have run into a dead end with this.
>
> OpenSSL 3.0.2 refuses to cooperate, despite enabling legacy ciphers:
>
>   BTF [M] net/nsh/nsh.ko
>   BTF [M] net/hsr/hsr.ko
> make -f ./Makefile ARCH=x86     KERNELRELEASE=6.3.0+ intdeb-pkg
> sh ./scripts/package/builddeb
>   INSTALL debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko
>   SIGN debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko
> At main.c:170:
> - SSL error:1E08010C:DECODER routines::unsupported: ../crypto/encode_decode/decoder_lib.c:101
> sign-file: ./
> make[6]: *** [scripts/Makefile.modinst:87: debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko] Error 1
> make[6]: *** Deleting file 'debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko'
> make[5]: *** [Makefile:1955: modules_install] Error 2
> make[4]: *** [scripts/Makefile.package:150: intdeb-pkg] Error 2
> make[3]: *** [Makefile:1657: intdeb-pkg] Error 2
> make[2]: *** [debian/rules:16: binary-arch] Error 2
> dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
> make[1]: *** [scripts/Makefile.package:139: bindeb-pkg] Error 2
> make: *** [Makefile:1657: bindeb-pkg] Error 2
>
> I have tried to enable NEXT crypto mode:
>
> % sudo update-crypto-policies --set NEXT
>
> and rebooted, but no use.
>
> Google also doesn't give a clue.
> I have been able to compile kernels on Ubuntu 22.04 LTS on my laptop just about a year ago.

Hi all,

There was no success in building 6.3+ with the Ubuntu generic config, but it has succeeded
with the config derived from Debian one.

Still, it would be interesting to find what is preventing the Ubuntu config from signing the
kernel modules. Up to that point the build process is fine.

Best regards,
Mirsad

--
Mirsad Todorovac
System engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb
Republic of Croatia, the European Union

Sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu


2023-05-05 13:07:12

by Bagas Sanjaya

[permalink] [raw]
Subject: Re: [BUILD] [FOUND WORKAROUND] Unable to sign drivers on Ubuntu 22.04 LTS desktop

On 5/5/23 16:00, Mirsad Goran Todorovac wrote:
> Hi all,
>
> There was no success in building 6.3+ with the Ubuntu generic config, but it has succeeded
> with the config derived from Debian one.
>
> Still, it would be interesting to find what is preventing the Ubuntu config from signing the
> kernel modules. Up to that point the build process is fine.
>

You will need to see Documentation/admin-guide/module-signing.rst.
Especially on "Generating signing keys", there are instructions on
generating your own signing key, because in most cases you don't
have access to signing keys from your distribution.

Anyway, when you have problems related to building kernel, always
Cc: linux-kbuild list.

Thanks.

--
An old man doll... just what I always wanted! - Clara