Skip to Main Content

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

How to load custom kernel module with Secure Boot (OL8.1 UEK6)

TualuaApr 7 2020 — edited Apr 21 2020

Hello!

I'm trying to load custom signed kernel module in VM with Secure Boot enabled using this guide

https://blog.delouw.ch/2017/04/18/signing-linux-kernel-kodules-and-enforce-to-load-only-signed-modules/

Everything works fine with default 4.18 kernel. I can sign the module and it loads successfully. However when I switch to UEK kernel I cannot load this module

I got message

modprobe: ERROR: could not insert 'hello': Operation not permitted

and

Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7

in dmesg

Key is deployed with mokutil and I can see it in /proc/keys

Is there any way without to load custom kernel modules with UEK kernel without disabling secure boot?

Comments
Post Details
Added on Apr 7 2020
22 comments
8,845 views