Why this module verification failed message occurred from only mlx_compat modules?

Infrastructure & Networking Software And Drivers
1

I installed MLNX_OFED_LINUX-4.7-1.0.0.1-rhel7.2-x86_64 with the following command.

​

commands:​

./mlnxofedinstall --without-fw-update --upstream-libs --dpdk --force --without-mft --without-neohost-backend --without-mlnx-fw-updater --without-ibutils --without-ibutils2 --without-mxm --without-mstflint --without-mlnx-iproute2 --without-opensm --without-ucx --without-mpi-selector --without-srp_daemon --without-mlnxofed-docs --without-mlnx-ethtool --without-infiniband-diags --without-qperf --without-perftest --add-kernel-support --skip-repo

​

​

After installation is complete, when I reboot, the module verfication failed message occurs only in mlx_compat module as shown below. My question is this.

  1. Why does this message not occur in the mlx5_core, mlx5_ib, etc. modules, but only in the mlx_compat module?​
  2. What is this message?
  3. Does it matter if it occurs?
  4. ​Is there any way to prevent this message from occurring?

​

​

​log:

[Tue Jun 23 07:06:21 2020] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI

[Tue Jun 23 07:06:21 2020] e1000: Copyright (c) 1999-2006 Intel Corporation.

[Tue Jun 23 07:06:21 2020] e1000 0000:02:01.0 eth0: (PCI:66MHz:32-bit) 00:0c:29:ad:e0:aa

[Tue Jun 23 07:06:21 2020] e1000 0000:02:01.0 eth0: Intel(R) PRO/1000 Network Connection

[Tue Jun 23 07:06:22 2020] isa_checker v1.0 start…

[Tue Jun 23 07:06:23 2020] mlx_compat: module verification failed: signature and/or required key missing - tainting kernel

[Tue Jun 23 07:06:23 2020] Compat-mlnx-ofed backport release: 1c4bf42

[Tue Jun 23 07:06:23 2020] Backport based on mlnx_ofed/mlnx-ofa_kernel-4.0.git 1c4bf42

[Tue Jun 23 07:06:23 2020] compat.git: mlnx_ofed/mlnx-ofa_kernel-4.0.git

[Tue Jun 23 07:06:23 2020] pps_core: LinuxPPS API ver. 1 registered

[Tue Jun 23 07:06:23 2020] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti giometti@linux.it

[Tue Jun 23 07:06:23 2020] PTP clock support registered

[Tue Jun 23 07:06:24 2020] floppy0: no floppy controllers found

[Tue Jun 23 07:06:24 2020] work still pending

[Tue Jun 23 07:06:24 2020] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None

rpm info:

[root@SNIPER ~]# rpm -qa |grep OFED

mlnx-ofa_kernel-4.7-OFED.4.7.1.0.0.1.g1c4bf42.rhel7u2.x86_64

ofed-scripts-4.7-OFED.4.7.1.0.0.x86_64

mlnx-ofa_kernel-modules-4.7-OFED.4.7.1.0.0.1.g1c4bf42.kver.3.10.0_OS.x86_64

mlnx-ofa_kernel-devel-4.7-OFED.4.7.1.0.0.1.g1c4bf42.rhel7u2.x86_64

2

Hello HC,

Thank you for posting your question on the NVIDIA/Mellanox Community.

The message you are getting is a harmless message from the kernel itself and can be ignored. You can resolve this by following the instructions on how-to Enroll Mellanox’s x.509 Public Key On your Systems → https://docs.mellanox.com/display/OFEDv502180/UEFI+Secure+Boot#UEFISecureBoot-RemovingSignaturefromKernelModules

Note: even if you strip the module if his signature, you will still see this harmless message.

Thank you,

~NVIDIA/Mellanox Technical Support