Koozali.org: home of the SME Server

kernel error on boot

Offline robf355

  • *
  • 70
  • +0/-0
kernel error on boot
« on: March 31, 2022, 08:15:31 AM »
Hi
I have wireguard installed on my machine, and I noticed the following error in /var/log/messages after an update / reboot this morning:

Mar 31 06:26:44 server kernel: [  112.183180] Request for unknown module key 'The ELRepo Project (http://elrepo.org): ELRepo.org Secure Boot Key: f365ad3481a7b20e3427b61b2a26635b83fe427b' err -11
Mar 31 06:26:44 server kernel: [  112.183485] wireguard: module verification failed: signature and/or required key missing - tainting kernel
Mar 31 06:26:44 server kernel: [  112.184444] wireguard: WireGuard 1.0.20210606 loaded. See www.wireguard.com for information.
Mar 31 06:26:44 server kernel: [  112.184446] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.

The error seems to have started appearing on 23rd feb after a software update, wireguard works, the kernel version when the message started was:

Feb 23 21:21:18 server kernel: [    0.000000] Linux version 3.10.0-1160.53.1.el7.x86_64 (mockbuild@k
builder.bsys.centos.org) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) ) #1 SMP Fri Jan 14 13
:59:45 UTC 2022
Feb 23 21:21:18 server kernel: [    0.000000] Command line: BOOT_IMAGE=/vmlinuz-3.10.0-1160.53.1.el7
.x86_64 root=/dev/mapper/main-root ro rd.lvm.lv=main/root rd.lvm.lv=main/swap rhgb quiet rootflags=u
quota,pquota

A quick internet search seems to indicate this may be a problem with the kernel module not being loaded, but that was from 2015.
https://www.mail-archive.com/search?l=wireguard@lists.zx2c4.com&q=subject:%22Module+verification+failed%22&o=newest&f=1

Can anyone suggest a solution, other than rebuilding the kernel as the post above suggests
Regards
Rob Carter

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: kernel error on boot
« Reply #1 on: March 31, 2022, 09:40:46 AM »
In the interum you could drop back to the known good kernel until a soulution is forthcoming, select kernel on start
--
qui scribit bis legit

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: kernel error on boot
« Reply #2 on: March 31, 2022, 10:12:15 AM »
Yes I was about to ask what you had installed as El Repo kernels are not standard. And you definitely don't want to be compiling your own kernel on a production server.

May be a bug against wireguard.

Let's see the what you have been up to:

Code: [Select]
/sbin/e-smith/audittools/newrpms
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline robf355

  • *
  • 70
  • +0/-0
Re: kernel error on boot
« Reply #3 on: March 31, 2022, 10:19:52 AM »
/sbin/e-smith/audittools/newrpms:

[root@server ~]# /sbin/e-smith/audittools/newrpms
Loaded plugins: fastestmirror, post-transaction-actions, priorities, smeserver
Loading mirror speeds from cached hostfile
 * base: mirror.bytemark.co.uk
 * smeaddons: www.mirrorservice.org
 * smeos: www.mirrorservice.org
 * smeupdates: www.mirrorservice.org
 * updates: mirror.freethought-internet.co.uk
Extra Packages
GeoIP.x86_64                       1.6.12-9.el7.sme                 @smecontribs
GeoIP-GeoLite-data.noarch          2018.06-7.el7.sme                @smecontribs
GeoIP-GeoLite-data-extra.noarch    2018.06-7.el7.sme                @smecontribs
kmod-wireguard.x86_64              9:1.0.20210606-1.el7_9.elrepo    @smecontribs
libicu69.x86_64                    69.1-2.el7.remi                  installed
perl-Unicode-IMAPUtf7.noarch       2.01-1.of.el7                    @smecontribs
php81-php.x86_64                   8.1.4-1.el7.remi                 @remi-safe
php81-php-bcmath.x86_64            8.1.4-1.el7.remi                 @remi-safe
php81-php-cli.x86_64               8.1.4-1.el7.remi                 @remi-safe
php81-php-common.x86_64            8.1.4-1.el7.remi                 @remi-safe
php81-php-enchant.x86_64           8.1.4-1.el7.remi                 @remi-safe
php81-php-fpm.x86_64               8.1.4-1.el7.remi                 @remi-safe
php81-php-gd.x86_64                8.1.4-1.el7.remi                 @remi-safe
php81-php-imap.x86_64              8.1.4-1.el7.remi                 @remi-safe
php81-php-intl.x86_64              8.1.4-1.el7.remi                 @remi-safe
php81-php-ldap.x86_64              8.1.4-1.el7.remi                 @remi-safe
php81-php-mbstring.x86_64          8.1.4-1.el7.remi                 @remi-safe
php81-php-mysqlnd.x86_64           8.1.4-1.el7.remi                 @remi-safe
php81-php-opcache.x86_64           8.1.4-1.el7.remi                 @remi-safe
php81-php-pdo.x86_64               8.1.4-1.el7.remi                 @remi-safe
php81-php-pear.noarch              1:1.10.13-1.el7.remi             installed
php81-php-pecl-xmlrpc.x86_64       1.0.0~rc3-1.el7.remi             @remi-safe
php81-php-pecl-zip.x86_64          1.20.0-1.el7.remi                installed
php81-php-process.x86_64           8.1.4-1.el7.remi                 @remi-safe
php81-php-snmp.x86_64              8.1.4-1.el7.remi                 @remi-safe
php81-php-soap.x86_64              8.1.4-1.el7.remi                 @remi-safe
php81-php-sodium.x86_64            8.1.4-1.el7.remi                 @remi-safe
php81-php-tidy.x86_64              8.1.4-1.el7.remi                 @remi-safe
php81-php-xml.x86_64               8.1.4-1.el7.remi                 @remi-safe
php81-runtime.x86_64               8.1-1.el7.remi                   installed
phpMyAdmin.noarch                  5.1.0-1.el7.sme                  @smecontribs
pkcs11-helper.x86_64               1.11-3.el7                       @smecontribs
smeserver-mailsorting.noarch       1.4-14.el7.sme                   @smecontribs
smeserver-mod_dav.noarch           1.1-7.el7.sme                    @smecontribs
smeserver-phpmyadmin.noarch        4.0.10.2-11.el7.sme              @smecontribs
smeserver-shared-folders.noarch    0.3-15.el7.sme                   @smecontribs
smeserver-userpanel.noarch         1.4-3.el7.sme                    @smecontribs
smeserver-wbl.noarch               0.5.0-6.el7.sme                  @smecontribs
smeserver-webhosting.noarch        0.0.9-15.el7.sme                 @smecontribs
smeserver-wireguard.x86_64         1.0-12.el7.sme                   @smecontribs
wireguard-tools.x86_64             1.0.20210914-1.el7               @smecontribs

Offline Jean-Philippe Pialasse

  • *
  • 2,745
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: kernel error on boot
« Reply #4 on: March 31, 2022, 12:35:37 PM »
Have you happen to realize that you used the word error a lot of time but ij has never been present in any of the log libe you provide.

The words emergency, alert, critical neither. 

Not even the word panic. 

Linux errors are pretty explicit when they occurs, everything else is informative.
 
The default log level is warning, which include sole level of informations needing attention but not leading to imminent issues. 

Apart from the log message noise, is something not working?

Have you tried to update the kernel module wireguard?

Have you read the kernel changelog ?

please read this https://www.linuxquestions.org/questions/linux-virtualization-and-cloud-90/module-verification-failed-signature-and-or-required-key-missing-tainting-kernel-4175533442/
 for a detailed explanation on the situation even if it does not refers to wireguard  but a different custom module

Offline robf355

  • *
  • 70
  • +0/-0
Re: kernel error on boot
« Reply #5 on: March 31, 2022, 12:53:14 PM »
Hi,
Even thugh you are correct there is no mention in the log of an error. "tainting kernel" seemed to indicate something serious to me, hence my description of it as an error.
your link does explain things however - thank you.