[ISSUE] ZFS module loading fails on newer kernels in BIOS mode

[ISSUE] ZFS module loading fails on newer kernels in BIOS mode

[notramo]

[-- Attachment #1: Type: text/plain, Size: 739 bytes --]

New issue by notramo on void-packages repository

https://github.com/void-linux/void-packages/issues/52618

Description:
### Is this a new report?

Yes

### System Info

Void 6.1.106_1 x86_64-musl GenuineIntel uptodate rrnFF

### Package(s) Affected

linux

### Does a report exist for this bug with the project's home (upstream) and/or another distro?

no

### Expected behaviour

System boots successfully on ZFS root with BIOS mode, and lockdown active. I don't know if BIOS is a cause, or it would fail also on UEFI.

### Actual behaviour

ZFS module loading fails because the DKMS-built module is not signed.

`linux-lts` works even with lockdown.

### Steps to reproduce

Install ZFS, and try to load it on newer-than-lts kernels.

Re: ZFS module loading fails on newer kernels in BIOS mode

[Duncaen]

[-- Attachment #1: Type: text/plain, Size: 183 bytes --]

New comment by Duncaen on void-packages repository

https://github.com/void-linux/void-packages/issues/52618#issuecomment-2408765785

Comment:
Its not supposed to work with lockdown.

Re: ZFS module loading fails on newer kernels in BIOS mode

[Duncaen]

[-- Attachment #1: Type: text/plain, Size: 268 bytes --]

New comment by Duncaen on void-packages repository

https://github.com/void-linux/void-packages/issues/52618#issuecomment-2408765785

Comment:
Its not supposed to work with lockdown.

Edit: Module signing wasn't enabled in the old kernels, so its not enforcing it. 

Re: [ISSUE] [CLOSED] ZFS module loading fails on newer kernels in BIOS mode

[Duncaen]

[-- Attachment #1: Type: text/plain, Size: 742 bytes --]

Closed issue by notramo on void-packages repository

https://github.com/void-linux/void-packages/issues/52618

Description:
### Is this a new report?

Yes

### System Info

Void 6.1.106_1 x86_64-musl GenuineIntel uptodate rrnFF

### Package(s) Affected

linux

### Does a report exist for this bug with the project's home (upstream) and/or another distro?

no

### Expected behaviour

System boots successfully on ZFS root with BIOS mode, and lockdown active. I don't know if BIOS is a cause, or it would fail also on UEFI.

### Actual behaviour

ZFS module loading fails because the DKMS-built module is not signed.

`linux-lts` works even with lockdown.

### Steps to reproduce

Install ZFS, and try to load it on newer-than-lts kernels.

Re: ZFS module loading fails on newer kernels in BIOS mode

[notramo]

[-- Attachment #1: Type: text/plain, Size: 382 bytes --]

New comment by notramo on void-packages repository

https://github.com/void-linux/void-packages/issues/52618#issuecomment-2408956945

Comment:
@Duncaen, Lockdown is a very useful tool, module signing enforcement is only a small part of it. I guess all DKMS modules are forbidden when it's enabled. Is there a way to work around only the signing, but keep all the lockdown features?

Re: ZFS module loading fails on newer kernels in BIOS mode

[Duncaen]

[-- Attachment #1: Type: text/plain, Size: 371 bytes --]

New comment by Duncaen on void-packages repository

https://github.com/void-linux/void-packages/issues/52618#issuecomment-2409120923

Comment:
You might be able to disable just module signing with `module.sig_enforce=0` on the kernel cmdline, not sure about that though.
Otherwise maybe enrolling your keys and enable signing in dkms. https://wiki.debian.org/SecureBoot