https://bugs.koozali.org/show_bug.cgi?id=13589
Bug ID: 13589
Summary: xt_geoip module needs secure boot disabled on EFI
systems
Classification: Contribs
Product: SME Contribs
Version: 11.0
Hardware: x86_64
OS: ---
Status: CONFIRMED
Severity: normal
Priority: P3
Component: smeserver-xt_geoip
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected],
[email protected], [email protected],
[email protected], [email protected]
Depends on: 12919, 12921
Target Milestone: ---
+++ This bug was initially created as a clone of Bug #12919 +++
Current GEOIP filtering : enabled
Current list of banished country codes : ==
Last update of GeoIP table : 2026/06/11 22:12
Module xt_geoip not loaded. GeoIP based filtering is inactive
# uname -a
Linux 4.18.0-553.129.1.el8_10.x86_64 #1 SMP Tue Jun 9 16:05:10 UTC 2026 x86_64
x86_64 x86_64 GNU/Linux
# modprobe -v xt_geoip
insmod
/lib/modules/4.18.0-553.129.1.el8_10.x86_64/extra/xtables-addons/xt_geoip.ko
modprobe: ERROR: could not insert 'xt_geoip': Required key not available
"This issue happens only on UEFI systems with enabled Secure Boot.
Solution 1: Disable Secure Boot from the BIOS, then reinstall normally
Solution 2: Manually sign the driver."
An alternative way is to disable Secure Boot using
# mokutil --disable-validation
You will be prompted to create a temporary password between 8 and 16
characters.
# signal-event reboot
During boot, a blue screen called MOK Manager (Machine Owner Key) will appear.
If you miss it, the system will continue to boot normally without applying the
change.
Select "Change/Disable Secure Boot state".
Enter the random characters of the password you created when prompted:
You may be asked for specific characters (e.g., "Enter password character 2").
Type the character and hit Enter.
Confirm the change to disable validation, then reboot.
You will see "booting in insecure mode".
# modprobe -v xt_geoip
insmod
/lib/modules/4.18.0-553.129.1.el8_10.x86_64/extra/xtables-addons/xt_geoip.ko
works without error, "xt_geoip not loaded" warning is gone
Referenced Bugs:
https://bugs.koozali.org/show_bug.cgi?id=12919
[Bug 12919] xt_geoip requires xtables-addons built for current kernel
https://bugs.koozali.org/show_bug.cgi?id=12921
[Bug 12921] create akmod wrapper
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are on the CC list for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
