Thanks for the driver package here! Would it be possible to also integrate the tuxedo-control-center here? Since munix9`s repo was deleted it is lacking for tumbleweed at all.
Hi, thank you for providing this service!
I'd like to use your compiled kernel modules on my tumbleweed notebook, but I can't because their singature can't be verified on my system.
Please give me a hint on how to add your (public?-)key to my system, so I can load your modules.
which kernel do you use?
I have the opensuse tumbleweed default kernel (currently 6.18.3-1-default), which does not have signature check enforced:
zgrep MODULE_SIG_FORCE /proc/config.gz
# CONFIG_MODULE_SIG_FORCE is not set
Hi - thank you very much for your support! I'm humbled by the amount of things I don't know.
You are correct: CONFIG_MODULE_SIG_FORCE is not set in my 6.18.3-1-default kernel.
Why do I still get his error?
sudo modprobe -v tuxedo_io
insmod /usr/lib/modules/6.18.3-1-default/updates/tuxedo_io/tuxedo_io.ko
modprobe: ERROR: could not insert 'tuxedo_io': Key was rejected by service
On my system secure boot is disabled and so far I understand should secure boot prevent the load of modules that are not signed with the kernel key. Maybe it is possible to import a further key to be trusted, I do not know how this is handled by modules built by open build service for tumbleweed. I would recommend to ask for that on the opensuse mailing lists, e.g. the opensuse-factory list.
Comments 8
Thanks for the driver package here! Would it be possible to also integrate the tuxedo-control-center here? Since munix9`s repo was deleted it is lacking for tumbleweed at all.
I had a look on tuxedo-control-center, but it is not that simple to be built from sources as it has some node-js dependencies. For the moment I use this repo https://rpm.tuxedocomputers.com/opensuse/tumbleweed/repo-tuxedo-computers.repo, which has the package and is compatible with tumbleweed.
Hi, thank you for providing this service! I'd like to use your compiled kernel modules on my tumbleweed notebook, but I can't because their singature can't be verified on my system. Please give me a hint on how to add your (public?-)key to my system, so I can load your modules.
Hello, not sure how you prefer to install the package, but when adding the repo: zypper ar https://download.opensuse.org/repositories/home:/frank_kunz:/tuxedo/openSUSE_Tumbleweed/home:frank_kunz:tuxedo.repo && zypper ref then the needed key is imported and you should get asked if you want to import that. By that you will also get the latest updates then when running zypper dup.
Hi, installing the package is not the problem, but loading the kernel modules is:
and this is because the kernel module is signed by your key:
How can I make my kernel accept your kernel module and not reject it?
which kernel do you use? I have the opensuse tumbleweed default kernel (currently 6.18.3-1-default), which does not have signature check enforced: zgrep MODULE_SIG_FORCE /proc/config.gz # CONFIG_MODULE_SIG_FORCE is not set
if you have enforced module signature checking by kernel commandline, then I assume you need to import the pubkey as described here: https://www.kernel.org/doc/html/v6.18/admin-guide/module-signing.html#public-keys-in-the-kernel
Hi - thank you very much for your support! I'm humbled by the amount of things I don't know.
You are correct: CONFIG_MODULE_SIG_FORCE is not set in my 6.18.3-1-default kernel.
Why do I still get his error?
Secure boot is enabled on my machine:
I found this:
It seams to me, that the kernel module signature is enforced, although the config is not set.
On my system secure boot is disabled and so far I understand should secure boot prevent the load of modules that are not signed with the kernel key. Maybe it is possible to import a further key to be trusted, I do not know how this is handled by modules built by open build service for tumbleweed. I would recommend to ask for that on the opensuse mailing lists, e.g. the opensuse-factory list.