similar to: How to get UEFI setting by shell?

Hi, another question.With secure boot on, I make a kernel module test.ko Then insmod test.ko: [root at localhost linux]# insmod test.ko insmod: ERROR: could not insert module test.ko: Required key not available How can I sign my test.ko for CentOS7.1? If I set secure boot off, insmod test.ko will be successful. w.k. ------------------ Original ------------------

Hi,volotinen: as it mentioned in your web link: "Your on the right track your module need to be signed", my question how to sign test_file_system.ko? thanks, w.k. ------------------ ???? ------------------ ???: "eero.volotinen";<eero.volotinen at iki.fi>; ????: 2016?1?22?(???) ??3:42 ???: "CentOS mailing list"<centos at

http://unix.stackexchange.com/questions/157539/cant-load-zfs-kernel-module-on-fedora-with-secure-boot-required-key-not-avai So, module must be signed with trusted key, or else it just fails. Eero 22.1.2016 9.34 ap. "wk" <304702903 at qq.com> kirjoitti: > Hi, > another question.With secure boot on, > I make a kernel module test.ko > Then insmod test.ko:

On 1/22/2016 7:04 AM, Gordon Messmer wrote: > On 01/21/2016 11:33 PM, wk wrote: >> How can I sign my test.ko for CentOS7.1? > > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/sect-signing-kernel-modules-for-secure-boot.html what a pile of security theater that MOK thing is. theater of the absurd, anyways. --

At 05:01 PM 8/4/2020, you wrote: >Am 05.08.20 um 01:27 schrieb david: >>At 04:18 PM 8/4/2020, you wrote: >>>Am 05.08.20 um 01:09 schrieb david: >>>>At 01:54 PM 8/4/2020, you wrote: >>>>>On Tue, 04 Aug 2020 13:44:05 -0700 >>>>>david wrote: >>>>> >>>>> > After all the updates, the system was NOT bootable.

At 04:18 PM 8/4/2020, you wrote: >Am 05.08.20 um 01:09 schrieb david: >>At 01:54 PM 8/4/2020, you wrote: >>>On Tue, 04 Aug 2020 13:44:05 -0700 >>>david wrote: >>> >>> > After all the updates, the system was NOT bootable. >>> >>>How long did you wait for it to boot, and what >>>did it do when it failed to boot?? What text

On 1/22/2016 11:00 AM, Eero Volotinen wrote: > It works on linux, it can't be secure? if you can insert a custom Machine Owner Key into this keyring, then anyone with sufficient ingenuity can, too. which renders the whole signature thing moot, other than as another step to be cracked. -- john r pierce, recycling bits in santa cruz

On 7/1/2015 2:58 AM, Gene Cumm wrote: >> I'm setting up UEFI booting and got to the point of having the system talk >> >to the dhcpd/tftpd server, grab the first image files (syslinux.efi) and >> >then continuously request the secondary image file (ldlinux.e64). > So it appears to go deaf. > >> >I'm wondering if I'm missing something or if someone

On 1/22/2016 3:42 PM, Gordon Messmer wrote: > On 01/22/2016 02:38 PM, John R Pierce wrote: >> for that matter, what about a VM running on a service like Amazon AWS >> (or pick your virtual server environment) ? AWS provides a remote >> console, doesn't it? > > AWS doesn't offer UEFI Secure Boot, so I'm not sure how that's relevant. > > It

On 1/22/2016 2:24 PM, Gordon Messmer wrote: > On 01/22/2016 01:56 PM, John R Pierce wrote: >> Sure, if someone has penetrated my IPMI and/or virtualization >> management, I'm already in a world of hurt > > Exactly. IPMI should be on a dedicated VLAN with a bastion host. No > other systems should have access to it at all. The servers, > especially, should not

On 01/21/2016 11:33 PM, wk wrote: > How can I sign my test.ko for CentOS7.1? https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/sect-signing-kernel-modules-for-secure-boot.html

It works on linux, it can't be secure? :) Eero 22.1.2016 8.54 ip. "John R Pierce" <pierce at hogranch.com> kirjoitti: > On 1/22/2016 7:04 AM, Gordon Messmer wrote: > >> On 01/21/2016 11:33 PM, wk wrote: >> >>> How can I sign my test.ko for CentOS7.1? >>> >> >> >>

Hello -- We completed an installation of CentOS 5.11 32-bit onto a Vmware ESXi 6.0.0 appliance for the purpose of running a legacy application. The hardware in question is a Dell PowerEdge R730xd system. The Vmware tools utility was installed onto the virtual machine, and that initially provided access to the network. Once that was done, patches from the CentOS repository were installed onto the

Hello, we want to migrate to CentOS 7(.1) , Server, Client etc ... Right now we need to suspend that because we have some serious issues with NFS4 shared ZFS ( kernel module - zfs on linux project ) Volumes and CentOS 7 clients. Our current server are CentOS6.5, if we share a zfs volume and do the following on this share: client A reads/access file "z.txt". Now client B replaces

Hi all, I'm glad to add glusterfs community. I have a glusterfs cluster: Nodes: 4 System: Centos7.1 Glusterfs: 3.8.9 Each Node: CPU: 48 core Mem: 128GB Disk: 1*4T There is one Distributed Replicated volume. There are ~160 k8s pods as clients connecting to glusterfs. But, the memory of glusterfsd process is too high, gradually increase to 100G every node. Then, I reboot the glusterfsd

> > On 7/1/2015 2:58 AM, Gene Cumm wrote: > >> I'm setting up UEFI booting and got to the point of having the system talk > >> >to the dhcpd/tftpd server, grab the first image files (syslinux.efi) and > >> >then continuously request the secondary image file (ldlinux.e64). > > So it appears to go deaf. > > > >> >I'm wondering

On Sun, 2014-09-07 at 00:02 +0200, John Keates wrote: > How do I assist with getting this in for Jessie? > > I have this working in a fairly easy setup, it basically only requires > the pep target to be on for debian?s Xen package, What is "pep"? > and a tiny bit of infrastructure to get xen.efi, vmlinuz, an initrd > and a xen.cfg on to the ESP partition and letting

Hello All, I have this Centos7 machine that"s dualbooted with Win7. It's Centos7 with Mate desktop. The upgrade to Centos7.1 was interrupted. I ssh-d into the machine and finished it manualy, by issuing the command package-cleanup --cleandupes and yum update Now I' missing some packages, after some re?nstalling, I can boot again. However, I can not log in. EM:apr 02

I have installed dom0 Wheezy 64 bit on Dell PowerEdge T310 with kernel from package and xen-unstable. System is in Uefi mode and booted with grub-efi-amd64. Booting without xen efibootmgr works, while with xen not, efivars kernel module is loaded but show this message: efibootmgr Fatal: Couldn''t open either sysfs or procfs directories for accessing EFI variables. Try ''modprobe

On Mon, Feb 5, 2018 at 8:27 AM, Kay Diederichs <kay.diederichs at uni-konstanz.de> wrote: > grub-install /dev/nvme0n1 Running this on computers with UEFI firmware is not good advice, it's an obsolete command. People should use the prebaked grubx64.efi binary that comes in the grub2-efi package, and is a signed binary so it can support UEFI Secure Boot. If you run grub2-install, a