From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 16 May 2025 13:39:28 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wr1-f61.google.com (mail-wr1-f61.google.com [209.85.221.61]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 54GBdRPG004851 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 16 May 2025 13:39:28 +0200 Received: by mail-wr1-f61.google.com with SMTP id ffacd0b85a97d-3a0b9bbfb0fsf1384658f8f.1 for ; Fri, 16 May 2025 04:39:28 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1747395562; cv=pass; d=google.com; s=arc-20240605; b=WbNF574wWui2cPR4RJdb3HMozibwy+8NDrlxmcfi5n0J48IdAsVQodcl940jxwgNc2 7Gd50IN86xmtiZb+QF72NAs2ovBMPfNUp2n4XsNRZVT8SED9nadM77Ej+JFPpadsYir0 WeSJFPvGKbzsMgSvFlNrMm/6sIG9r1d9yrsmbIoTSKkcMIwb3LDfqeY71RTUZRE4/C/R j2O77dtc8mgUxRj4Sl7FhZlUJkKIbtWbSNera4yi8hzvyDANjCCjj4HPE/rfhLcBjJTn FF9sqORhcD3v33XxSnchuQRPaP4laeZwF0bD4yJFeHxeMNAQ3d0o/ghCcDnWOq+0UPkl 4daA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=S1P3RfcKFeXcYFECm9tVxynnlVgB5Odw5Fck3IgnZuE=; fh=DEKartjHmj6RQeh2cGwrHscbEu6H0PCt2ZUo1bUXSvw=; b=OESrqOjyIFtKZS7CITJNRopZ5ElQyAm7nw2LY+3o1/zxVYzU9oVFZhO5SVmsIm1bkL IWNStHzSJ7qAZnl+p3y9cH1retRxx1wHT+ntETyGtHod0G6qg1FUFLZ1SZg54jJlZImC jbwYcTSQctO3UsKwkIQBwjrbEOvfj7rqv0M+OEQdwgXDlItFSLuADCbj1HFH/Xbir7Ng VJtocSYMH7WsXRBDLIdAKfHJUzRGcgSnCK0p0yHIjQNDSvQjmyVNPttzemmkGvUKCDTa zgu+vEBLIbvsu2fVg0YKLPpNNklGIOwmsZDdRtJ+PrqHy9gxz0BSMVG8Y3Iq/l7a9vKg HvUQ==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WM3r9bWp; spf=pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-68982-20250516113918f48845329b4bc8c600-H9fqie@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1747395562; x=1748000362; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to; bh=S1P3RfcKFeXcYFECm9tVxynnlVgB5Odw5Fck3IgnZuE=; b=R7YDy4fxaytSPQoc8fzTpDs8BxW6vk2WDPxyB6yx5pyL41EqMa2MuUQPPbSHwMIpBI A3YcQD8oBpc7ejaDjc6aZ1No7EyJi39NqRhCXpVJ9ZiaZ+HGjmR43R6flTQsNQpZX07r bERgJU64uHRPSvfSidEn2IztMqbgkrX2A/+vvQqMQXkegPTWPobyB28CxaAF81MowQz+ uUDsptX+mlKxzbbTW9wFotxPblvSO7sXDSqD94r+cu8Aji3b9gYqw8Ep1vlr6IZqqX2n TUOiTbNziZqlykFOt9aygf5hopRSFWGyqbS12kaRvMs/f+z3WBBoaZEyry9vqghx5dYw /9IQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747395562; x=1748000362; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=S1P3RfcKFeXcYFECm9tVxynnlVgB5Odw5Fck3IgnZuE=; b=CReAp5IRJUMUuPNw/Nr2NR5x/1LGAba1ABWocHws/ZNZbNjVC8hF9guhy/G6LIgWPf Zyb1nLgbUZsK/4D7XeNweWzO273CvhboqvbygHh3kDS7abbFO2Faw8noYJZgvZ/gEt7I EDdTIXXbiOmKmQN+JQriVLNF3W3UnbVHIAjQuaLMDWNtE/I3ITLuLgXpc9Z2j9ZYfbJU mC6ROQCLbqg+3eBkVSiMqHs06P8wRnHvDzd9D94g0vzphdJ6DTVw1lmyw4msAXGOYR6h WTdyM2PPzR4QTFhph1/DszLTFIWCA53qBi/nHkXBWVsz64+8pIpBKeM+wUXOGoBbR2VN lFjg== X-Forwarded-Encrypted: i=2; AJvYcCUfEDPeAU8q54afFsEi+wtFmqQiR2Rx5SW4/tUWRZz3Mxq5jnPMXFnMSdvZKPdGeZTFqman@ilbers.de X-Gm-Message-State: AOJu0YwtM89lsrkOparFsUngVkQhr3+WbSDCmYfwV4Yf4Htay2WPSe/g 7Q9Q6Y+N7dERe6fir8AnZ9iZlCmqcFljl2L6bj+qjkEoUaaJNOlgoqn+ X-Google-Smtp-Source: AGHT+IHBi6yjW8NkWcKrw7Qo/5eVcNjFbGr0JpLmmaUEpJu9pjSy1zMEwUBfL1uHW9UE5GwohjPj8w== X-Received: by 2002:a05:6000:400f:b0:3a0:77d0:ba3 with SMTP id ffacd0b85a97d-3a35c80922bmr2845803f8f.5.1747395562208; Fri, 16 May 2025 04:39:22 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AVT/gBHAIuHniaJjyxFY00+dqV51esiF71ki1Ocq0txbRiXPHg== Received: by 2002:a05:6000:401e:b0:3a0:92c4:91cc with SMTP id ffacd0b85a97d-3a351352188ls1004747f8f.0.-pod-prod-09-eu; Fri, 16 May 2025 04:39:19 -0700 (PDT) X-Received: by 2002:a05:6000:1a8d:b0:38b:d7d2:12f6 with SMTP id ffacd0b85a97d-3a35c8092ebmr3285403f8f.2.1747395559475; Fri, 16 May 2025 04:39:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1747395559; cv=none; d=google.com; s=arc-20240605; b=bqHt311XN4XK2Z0u/7mXiu5pTmMZUEZy52Y4RPvnnnNR1a1lY/5RqdUzBVwKznykzK f19zaKk/WnPrkMSWk02QnLWpGySofk+Ss2NyqPg0a7ONvVnxqnK246w53fSMgtTbMo0R EUvqMVIyzTo8AeMqg/naRilctMNXSd1AMI7DMD8l8yv/kdb4MfJ1OXTDErkxcBKoVPN9 KJV2i5auC2GPMnr7NaP+Edn/aU5BPBZh8KYN1ccX2HlQ+G+e8UFj4I7nRmOuePHJtJAJ B181a5ly6d7M09Vmm25Yzhym6X8TdECZz2K3qsUTnHftuDWOvTqUb9aYKGMCUrLE8111 I4Sw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:cc:to:from:dkim-signature; bh=/RwJmVfYsTCKUAHK2DfoPaur8wGz/L2p79eBsGVO4Hs=; fh=3XHIu/InRAzp3Rp7l/ptHNRaAKFVDHN18ga8bDsOpak=; b=gFG8MQAdn6j/wR63mwZxwKRIZJ2LYSLP2bN4tFRzt277A9A+hBpgfcvJDi366CK+Qs m9QKdcpHwTHEK1wGXCa8KTuBBXrF5usxi551pPjhzHZ7vc/rffINYdIyutFIVGRtf9la 52N5ei0Il4EzI8mEru0DJwasDAAhottueVP6WUu3ykeDWKT2PaR2jBWUzj5jg5Q/TaTQ sxI+FnibnavLd6JgxfNNg0zONzBWUaDxn2pnvo0s/YAmwXbe4wla8o8Jt3049Kpa6B/v pHMvOWhuQQvYfzrwIBlVq8rsqi8VS+kksEdKwSQhpI2tDGC189NPFVtahAtN94j0cZ3o FJfw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WM3r9bWp; spf=pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-68982-20250516113918f48845329b4bc8c600-H9fqie@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net. [185.136.64.228]) by gmr-mx.google.com with ESMTPS id ffacd0b85a97d-3a35ca7c39asi26713f8f.5.2025.05.16.04.39.19 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 16 May 2025 04:39:19 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) client-ip=185.136.64.228; Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 20250516113918f48845329b4bc8c600 for ; Fri, 16 May 2025 13:39:19 +0200 From: "'Florian Bezdeka' via isar-users" To: isar-users@googlegroups.com Cc: Florian Bezdeka Subject: [PATCH] linux-custom: Fix module signing in combination with compression Date: Fri, 16 May 2025 13:38:54 +0200 Message-Id: <20250516113854.1515596-1-florian.bezdeka@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-68982:519-21489:flowmailer X-Original-Sender: florian.bezdeka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WM3r9bWp; spf=pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-68982-20250516113918f48845329b4bc8c600-H9fqie@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Florian Bezdeka Reply-To: Florian Bezdeka Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: iOcMgGTstD9Q The right order for each non-debug module is INSTALL, STRIP, SIGN, COMPRESS. As "make modules_sign" is a subset of "make modules_install" the order was different, basically trying to re-sign after COMPRESS already happended, which triggered a build failure like + kmods_sign + '[' -n y ']' + /usr/bin/make O=/<>/build-full INSTALL_MOD_PATH=/<>/debian/linux-image-stable-rt modules_sign make[2]: Entering directory '/<>' make[3]: Entering directory '/<>/build-full' SIGN /<>/debian/linux-image-stable-rt/lib/modules/6.14.0/kernel/arch/x86/events/amd/power.ko At main.c:302: - SSL error:FFFFFFFF80000002:system library::No such file or directory: ../crypto/bio/bss_file.c:67 - SSL error:10000080:BIO routines::no such file: ../crypto/bio/bss_file.c:75 sign-file: /<>/debian/linux-image-stable-rt/lib/modules/6.14.0/kernel/arch/x86/events/amd/power.ko Align the installation of the debug version of modules with the build process of Debian by using modules_install again, with a different installation directory and signing and compression disabled. Signed-off-by: Florian Bezdeka --- Hi all, this has been tested with Linux 6.14 and 6.12. Older versions should work as well, more testing highly recommended. Best regards, Florian .../linux/files/debian/isar/install.tmpl | 28 +++++++------------ 1 file changed, 10 insertions(+), 18 deletions(-) diff --git a/meta/recipes-kernel/linux/files/debian/isar/install.tmpl b/meta/recipes-kernel/linux/files/debian/isar/install.tmpl index 00011517..818da49c 100644 --- a/meta/recipes-kernel/linux/files/debian/isar/install.tmpl +++ b/meta/recipes-kernel/linux/files/debian/isar/install.tmpl @@ -129,34 +129,26 @@ install_dtbs() { install_kmods() { [ -n "${CONFIG_MODULES}" ] || return 0 - ${MAKE} O=${O} INSTALL_MOD_PATH=${deb_img_dir} modules_install + ${MAKE} O=${O} modules_install \ + INSTALL_MOD_PATH=${deb_img_dir} \ + INSTALL_MOD_STRIP=1 touch ${deb_img_dir}/lib/modules/${krel}/.fresh-install rm -fv ${deb_img_dir}/lib/modules/${krel}/build rm -fv ${deb_img_dir}/lib/modules/${krel}/source install_kmods_debug } -kmods_sign() { - [ -n "${CONFIG_MODULE_SIG_ALL}" ] || return 0 - ${MAKE} O=${O} INSTALL_MOD_PATH=${deb_img_dir} modules_sign -} - install_kmods_debug() { [ -n "${CONFIG_DEBUG_INFO}" ] || return 0 - kmod_inst_dir=${deb_img_dir}/lib/modules - kmod_debug_dir=${deb_dbg_dir}/usr/lib/debug - - # copy kernels modules to usr/lib/debug - mkdir -p ${kmod_debug_dir} - tar -C ${kmod_inst_dir}/ -cO --exclude='modules.*' . | tar -C ${kmod_debug_dir}/ -xf - - # strip everything but debug sections for modules in usr/lib/debug - find ${kmod_debug_dir} -name *.ko -exec ${CROSS_COMPILE}objcopy --only-keep-debug {} \; - # and strip debug sections from modules in lib/modules - find ${kmod_inst_dir} -name *.ko -exec ${CROSS_COMPILE}objcopy --strip-debug {} \; + kmod_inst_dir=${deb_dbg_dir}/usr/lib/debug - # re-sign stripped kernel modules - kmods_sign + # cmd_sign=: Don't sign modules + # suffix-y=: Don't compress modules + ${MAKE} O=${O} modules_install \ + INSTALL_MOD_PATH=${kmod_inst_dir} \ + cmd_sign= \ + suffix-y= } headers_check() { -- 2.39.5 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20250516113854.1515596-1-florian.bezdeka%40siemens.com.