Package: dkms
Version: 3.0.8-3
Severity: important

Dear Maintainer,
When I install a dkms module the /var/lib/dkms MOK is not created and no 
signing happens at build time.
Debugging with set -x the dkms script

dkms prepare_signing step here fails per:
+ module=acpi-call
+ module_version=1.1.0
+ kernelver=6.0.0-0.deb11.2-amd64
+ arch=x86_64
+ do_build
+ prepare_signing
+ '[' '!' '' ']'
+ case "$running_distribution" in
+ sign_file=/usr/lib/linux-kbuild-6.0.0-0.deb11/scripts/sign-file
+ echo 'Sign command: /usr/lib/linux-kbuild-6.0.0-0.deb11/scripts/sign-file'
+ [[ ! -f /usr/lib/linux-kbuild-6.0.0-0.deb11/scripts/sign-file ]]
+ echo 'Binary /usr/lib/linux-kbuild-6.0.0-0.deb11/scripts/sign-file not found, 
modules won'\''t be signed'
+ return
+ prepare_build


ie the kernel path is wrong (kernelvers set to linux-kbuild-6.0.0-0.deb11 
instead of linux-kbuild-6.0).
The signing script is correctly available in:
/usr/lib/linux-kbuild-6.0/scripts/sign-file.
So the MOK is not generated and the dkms modules are not signed.

iNote that upstream added a workaround for dkms modules built against local 
kernel source
from user build. 
https://github.com/dell/dkms/commit/a6cb5540f191c427d19af90c7b518be674921775
This may workaround this bug has 
/lib/modules/6.0.0-0.deb11.2-amd64/build/scripts/sign-file
also points to this script. Still the debian specific code does not work 
(though once the upstream
 fallback will be in debian, this issue will not be important anymore).

uname -a
Linux cyclope 6.0.0-0.deb11.2-amd64 #1 SMP PREEMPT_DYNAMIC Debian 
6.0.3-1~bpo11+1 (2022-10-29) x86_64 GNU/Linux

I don't know how to generate the string linux-kbuild-6.0 thus this bug report.
dkms does
 debian* )
                
sign_file="/usr/lib/linux-kbuild-${kernelver%.*}/scripts/sign-file"


Cheers,
Alban



-- System Information:
Debian Release: 11.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'stable'), (500, 'oldstable'), (90, 'unstable-debug'), 
(90, 'testing-debug'), (90, 'unstable'), (90, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.0-0.deb11.2-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dkms depends on:
ii  build-essential        12.9
ii  clang-11 [c-compiler]  1:11.0.1-2
ii  dctrl-tools            2.24-3+b1
ii  dh-dkms                3.0.8-3
ii  dpkg-dev               1.20.12
ii  gcc [c-compiler]       4:10.2.1-1
ii  gcc-10 [c-compiler]    10.2.1-6
ii  gcc-11 [c-compiler]    11.3.0-5
ii  gcc-9 [c-compiler]     9.3.0-22
ii  kmod                   28-1
ii  lsb-release            11.1.0
ii  make                   4.3-4.1
ii  patch                  2.7.6-7

Versions of packages dkms recommends:
ii  fakeroot                                     1.25.3-1.1
ii  linux-headers-amd64 [linux-headers-generic]  6.0.3-1~bpo11+1
ii  sudo                                         1.9.5p2-3

Versions of packages dkms suggests:
ii  e2fsprogs  1.46.2-2
ii  menu       2.1.48

-- no debconf information

Reply via email to