Development discussion of WireGuard
 help / color / mirror / Atom feed
* wireguard.ko on RHEL8
@ 2022-04-24 18:16 Steve Dickson
  2022-04-24 20:03 ` Joe Doss
  0 siblings, 1 reply; 3+ messages in thread
From: Steve Dickson @ 2022-04-24 18:16 UTC (permalink / raw)
  To: wireguard

Hello,

Trying to install wireguard.ko on a RHEL8 vm (4.18.0-348.el8.x86_64)
and I'm getting

    wireguard: module verification failed: signature and/or required key 
missing - tainting kernel

The entire error:
      http://pastebin.test.redhat.com/1046896

is there anything at can be done about that?

I'm new to wireguard and I'm pretty impress...
It came up in both Fedora rawhide and an
unreleased verson of RHEL9...

We are trying to used it as our network in
a community wide virtual NFS testing event
called Bakeathon [1]

Again I'm new to wireguard but not to kernels ;-)
So if you could throw something at me to
help me get over this bum... It would be appreciated!

Note: I am not member of this list so please
reply to be directly.

tia,

steved.

[1] http://www.nfsv4bat.org/Events/2022/Apr/BAT/index.html


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: wireguard.ko on RHEL8
  2022-04-24 18:16 wireguard.ko on RHEL8 Steve Dickson
@ 2022-04-24 20:03 ` Joe Doss
  2022-04-28 16:06   ` Steve Dickson
  0 siblings, 1 reply; 3+ messages in thread
From: Joe Doss @ 2022-04-24 20:03 UTC (permalink / raw)
  To: steved; +Cc: wireguard

Hey Steve,

On 4/24/22 1:16 PM, Steve Dickson wrote:
> 
> Trying to install wireguard.ko on a RHEL8 vm (4.18.0-348.el8.x86_64)
> and I'm getting
> 
>     wireguard: module verification failed: signature and/or required key 
> missing - tainting kernel
> 
> The entire error:
> http://pastebin.test.redhat.com/1046896
> 
> is there anything at can be done about that?
> 
> I'm new to wireguard and I'm pretty impress...
> It came up in both Fedora rawhide and an
> unreleased verson of RHEL9...
> 
> We are trying to used it as our network in
> a community wide virtual NFS testing event
> called Bakeathon [1]
> 
> Again I'm new to wireguard but not to kernels ;-)
> So if you could throw something at me to
> help me get over this bum... It would be appreciated!
> 
> Note: I am not member of this list so please
> reply to be directly.

You have secure boot enabled, so you need to generate a MOK key pair, 
manually sign your wireguard.ko, and enroll your MOK cert or disable 
secure boot.

I use this script [1] to sign my NVIDIA drivers on my workstation after 
they are built via akmod.

Hope this helps!
Joe

[1]: https://gist.github.com/jdoss/495e814ef4ef599e480c31d4843eb6c0

-- 
Joe Doss
joe@solidadmin.com

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: wireguard.ko on RHEL8
  2022-04-24 20:03 ` Joe Doss
@ 2022-04-28 16:06   ` Steve Dickson
  0 siblings, 0 replies; 3+ messages in thread
From: Steve Dickson @ 2022-04-28 16:06 UTC (permalink / raw)
  To: Joe Doss; +Cc: wireguard

Hey!

My apologies on my delayed response...

On 4/24/22 4:03 PM, Joe Doss wrote:
> Hey Steve,
> 
> On 4/24/22 1:16 PM, Steve Dickson wrote:
>>
>> Trying to install wireguard.ko on a RHEL8 vm (4.18.0-348.el8.x86_64)
>> and I'm getting
>>
>>     wireguard: module verification failed: signature and/or required 
>> key missing - tainting kernel
>>
>> The entire error:
>> http://pastebin.test.redhat.com/1046896
>>
>> is there anything at can be done about that?
>>
>> I'm new to wireguard and I'm pretty impress...
>> It came up in both Fedora rawhide and an
>> unreleased verson of RHEL9...
>>
>> We are trying to used it as our network in
>> a community wide virtual NFS testing event
>> called Bakeathon [1]
>>
>> Again I'm new to wireguard but not to kernels ;-)
>> So if you could throw something at me to
>> help me get over this bum... It would be appreciated!
>>
>> Note: I am not member of this list so please
>> reply to be directly.
> 
> You have secure boot enabled, so you need to generate a MOK key pair, 
> manually sign your wireguard.ko, and enroll your MOK cert or disable 
> secure boot.
> 
> I use this script [1] to sign my NVIDIA drivers on my workstation after 
> they are built via akmod.
> 
> Hope this helps!
> Joe
> 
> [1]: https://gist.github.com/jdoss/495e814ef4ef599e480c31d4843eb6c0
> 
Thanks for the pointer... but I ended doing something
different that worked very well...

1) I enabled the Fedora Infra Cloud repo which has
    the jdoss/wireguard repo
       dnf copr enable jdoss/wireguard

2) Then installed the  wireguard-dkms and  wireguard-tools
    packets which brought in the dkms command.
        dnf install wireguard-dkms wireguard-tools

3) Then I simply reboot and mdks compile the module and
    installed it... Very cool!

Thanks again!

steved.


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2022-04-28 16:06 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-04-24 18:16 wireguard.ko on RHEL8 Steve Dickson
2022-04-24 20:03 ` Joe Doss
2022-04-28 16:06   ` Steve Dickson

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).