 |
I was about to file a similar bug, and I found this, so I'll add my information: To reproduce, install CentOS from the minimal ISO, then run "yum groupinstall base". This will install the "kmod-kvdo" and "vdo" packages. Then run "modprobe kvdo". Aside from the events in the kernel log mentioned above, the following lines will appear in /proc/modules: kvdo 493161 0 - Live 0xffffffffc05cb000 (OE) uds 274920 1 kvdo, Live 0xffffffffc0573000 (OE) The following kernel taint flags appear: "O": out-of-tree (this is expected, as kvdo and uds are built out-of-tree) "E": unsigned module loaded in a kernel supporting module signature Output of "modinfo kvdo": filename: /lib/modules/3.10.0-862.el7.x86_64/weak-updates/kmod-kvdo/vdo/kvdo.ko version: 6.1.0.168 license: GPL author: Red Hat, Inc. description: device-mapper target for transparent deduplication retpoline: Y rhelversion: 7.5 srcversion: B2308E3B1001CB1D9AED027 depends: uds,dm-mod vermagic: 3.10.0-862.2.3.el7.x86_64 SMP mod_unload modversions Output of "modinfo uds": filename: /lib/modules/3.10.0-862.el7.x86_64/weak-updates/kmod-kvdo/uds/uds.ko version: 6.1.0.43 license: GPL author: Red Hat, Inc. description: deduplication engine retpoline: Y rhelversion: 7.5 srcversion: E972A3C9A3F6D0EC6863501 depends: vermagic: 3.10.0-862.2.3.el7.x86_64 SMP mod_unload modversions |
 |
I confirm the issue. Assigned to JohnnyHughes. Also, a new category kmod-kvdo created. |
|
|
Same on CentOS 7.6: modinfo kvdo filename: /lib/modules/3.10.0-957.12.1.el7.x86_64/weak-updates/kmod-kvdo/vdo/kvdo.ko version: 6.1.1.125 license: GPL author: Red Hat, Inc. description: device-mapper target for transparent deduplication retpoline: Y rhelversion: 7.6 srcversion: 3BE07A4D9FBE2D0BA9D2041 depends: uds,dm-mod vermagic: 3.10.0-957.el7.x86_64 SMP mod_unload modversions |
 |
Reminder sent to: JohnnyHughes |
 |
The signature is not part of the spec file (that I can see) .. and this package does not generate a key (like the normal kernel) to sign modules. It would seem that Red Hat has a special process to sign EXTERNAL kernel modules that is external to the build process in mock. CentOS does not have a any such process or keys or external mechanism at this time. If this is an actual problem that causes actual issues, and if someone can provide research as to how these external modules can be signed, and if we can come up with an external process to sign modules .. then we can make progress on this bug. Here is the spec file .. am I missing a signing process: https://git.centos.org/rpms/kmod-kvdo/blob/c7/f/SPECS/kvdo.spec NOTE: signed externally generated modules have never been provided by any version of CentOS to date. |
|
|
Any new development? If not, this ticket must be closed as 'not fixable'. |
- Anonymous
