Kernel module fails verification in BSP 35.6.2

Robotics & Edge Computing Jetson & Embedded Systems Jetson AGX Xavier
,
1

When insmod a kernel module in Jetson AGX Xavier industrial BSP 35.6.2, I get the following kernwl message:

$ sudo  insmod  xxx.ko param1="PAR1" "dyndbg=\"DYNDBGSTR\""
[   99.620917] xxx: module verification failed: signature and/or required key missing - tainting kernel

This used to work in BSP 32.7.1

Apparently, UEFI is working as if secure boot is enabled… what key and procedure should I used to sign my modules?

By the way, this might be unrelated, but I also see that pr_debug does not work anymore in any functions marked as __init, while it does in __exit and normal functions… I guess that my modules should keep the module init in memory if I want to see debugging traces… that was not so in BSP 32.7.1

3

hello david.fernandez,

here’re couple of approaches to resovle this.
(1) you may configure CONFIG_MODULE_SIG as disabled to get rid of the message during modprobe/insmod.
or…
(2) you may try to specify your own sig_key using CONFIG_MODULE_SIG_KEY in kernel config, to rebuild the kernel and kernel modules, install the kernel image, dtbs and kernel modules to target.
please see-also developer guide for reference, Kernel Module Signing.