From patchwork Fri May 16 11:38:54 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Florian Bezdeka X-Patchwork-Id: 4211 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 16 May 2025 13:39:28 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wr1-f60.google.com (mail-wr1-f60.google.com [209.85.221.60]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 54GBdRgS004856 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 16 May 2025 13:39:28 +0200 Received: by mail-wr1-f60.google.com with SMTP id ffacd0b85a97d-3a0db717b55sf1406809f8f.3 for ; Fri, 16 May 2025 04:39:28 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1747395562; cv=pass; d=google.com; s=arc-20240605; b=OFEF9sD8SKOQvfJPed+O6KilvM3ve/DOfXUY9emTb5Sv6t/ZZQKWKRZqGfilMyBqHH Nl5cae9CG23sdqBOSC6VBtQMAjov6rQKOMAhoQDlG10yhwxopyoPVAnz2cFT8+XR+gU5 xYLbYmBV0xmcM3+kuNhP0nbJZ6efvD5t+gLfg0DrhDVuOQLwrQQ5y0Bb9D8fAdXbSEcs 8IxB6zfMGxJy6y03LXAQpeaXH9HznJGquCOs6RuR9J+nNAFbJqqJBfBqBgzYxq8VwmWc RikCJYfirqNhrWZ5QaMvEiS6V0w8aAmU1KkX+gZjHnaoZhdqPlBE+RMsATIg8EEt4fVP Ozjg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=S1P3RfcKFeXcYFECm9tVxynnlVgB5Odw5Fck3IgnZuE=; fh=V4HueXkZi9s/6x3oFZiuNSWxNVTQKq5QZZkBD38iB48=; b=gi7PQBk2hsXNhoBy+s/H1OQL8aalnye7gS2Q6RAwo/gTSpDWUB4eu6BCLeePS+CAo5 MfkN5u7ku8ISgjfD5j+Ly+pew35ajA3lPZmwv0bBRwWYQVfFPOfWqgRNtoP9yOleHeg+ 3OZv9oWv8AOeJSlIXxmOPJ0gb0T6y0WLIvqfEopYEQcPQ1uS0QSri0R6tfSQfLIEU0CA HIjNNu4r945jGQfX4QG+NE6VWvBEiCjI/dhMituJ0DwjZf45ok74g0/5W6+KJmy8kdT3 55M+zV1sb1olFV1JAAhPuQxHDlZRvHFZ94nt6WnZxPiSgS+n7d4dnSSGCEQcD13u++51 QFnQ==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WM3r9bWp; spf=pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-68982-20250516113918f48845329b4bc8c600-H9fqie@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1747395562; x=1748000362; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to; bh=S1P3RfcKFeXcYFECm9tVxynnlVgB5Odw5Fck3IgnZuE=; b=lC4zd2B/r+rTJHWa0keOph9YqVqgVkAT5P6Nxg5Y7UqFtRjQOiwSSLi4deWsQLAGHq 7543AaZqsIcQobWsy7Fd6KfA8358FXvv7A+AGA9AhZKe1z5D1rXdMFETirRQp5pYonqf NYCt0s7xtfs2keF1Ge6jISjnQdVrGDgI0bh9iei57IzLrXe5SBb9DPdMl/sucg/din49 w4/GW7rE701VW0E5IGMc9ZxYcRvXdDOAu6fdyoC6zEGocxvZYLZHr3FI1ChuCMeS/hE7 560ZHiNrNWbe8VfZAUYHixB+n/K0A2FMigtVGDHUCw18Hqp3QTwKklM241A8LTIw7QaK d99w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747395562; x=1748000362; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=S1P3RfcKFeXcYFECm9tVxynnlVgB5Odw5Fck3IgnZuE=; b=WzLe6AMsOTqlbdC1hLHjxsR+1x5JlsMPL3lifAN4jG57v2rNQRXMGn6oICBolLQW9M A+ytcAP1rFfE0HxFNt3ly6IlRfKYXTaJvoHgkSEaV4HjlqqxMNpsGC7M1BACr46NqQAU LsbcAqWp9OpBtvS8SOSqaSdrm9ZdEYT0Nmgik9UU4dD92wA7/t/TlDEVQovin/Xfgl6t 41wSgqFj3xA2fT78zs5wEekgCxnm3+4l6iX0UfdDzQ4WDVEAvMlg92D2+h5tWLgfX3nC ZlVWZ3l4NXkIc3hw2K6Ee/T8IFwDCMyrvEZtWuPga5kmbtvp6KPfayTvc5S1RwJPnXVH CjgQ== X-Forwarded-Encrypted: i=2; AJvYcCXZyCPtMY3JCXr4lLDHzRt60QkVh66KoDH4n4KZ3HnjWiM3aoCzq+l/e5Pxa8qUSjgfIiPaj0I=@isar-build.org X-Gm-Message-State: AOJu0YyorDQ1pEdD1VGk0IC5Fy+DJE5j8yQ8oO7RQ5Mu2v1dbbR7ZoMd 1uOIaEskOSVPhoehc5QAwJGy2oBmbZH64Rpe08wjq+J/07vrZXpMT0W/ X-Google-Smtp-Source: AGHT+IHBi6yjW8NkWcKrw7Qo/5eVcNjFbGr0JpLmmaUEpJu9pjSy1zMEwUBfL1uHW9UE5GwohjPj8w== X-Received: by 2002:a05:6000:400f:b0:3a0:77d0:ba3 with SMTP id ffacd0b85a97d-3a35c80922bmr2845803f8f.5.1747395562208; Fri, 16 May 2025 04:39:22 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AVT/gBHAIuHniaJjyxFY00+dqV51esiF71ki1Ocq0txbRiXPHg== Received: by 2002:a05:6000:401e:b0:3a0:92c4:91cc with SMTP id ffacd0b85a97d-3a351352188ls1004747f8f.0.-pod-prod-09-eu; Fri, 16 May 2025 04:39:19 -0700 (PDT) X-Received: by 2002:a05:6000:1a8d:b0:38b:d7d2:12f6 with SMTP id ffacd0b85a97d-3a35c8092ebmr3285403f8f.2.1747395559475; Fri, 16 May 2025 04:39:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1747395559; cv=none; d=google.com; s=arc-20240605; b=bqHt311XN4XK2Z0u/7mXiu5pTmMZUEZy52Y4RPvnnnNR1a1lY/5RqdUzBVwKznykzK f19zaKk/WnPrkMSWk02QnLWpGySofk+Ss2NyqPg0a7ONvVnxqnK246w53fSMgtTbMo0R EUvqMVIyzTo8AeMqg/naRilctMNXSd1AMI7DMD8l8yv/kdb4MfJ1OXTDErkxcBKoVPN9 KJV2i5auC2GPMnr7NaP+Edn/aU5BPBZh8KYN1ccX2HlQ+G+e8UFj4I7nRmOuePHJtJAJ B181a5ly6d7M09Vmm25Yzhym6X8TdECZz2K3qsUTnHftuDWOvTqUb9aYKGMCUrLE8111 I4Sw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:cc:to:from:dkim-signature; bh=/RwJmVfYsTCKUAHK2DfoPaur8wGz/L2p79eBsGVO4Hs=; fh=3XHIu/InRAzp3Rp7l/ptHNRaAKFVDHN18ga8bDsOpak=; b=gFG8MQAdn6j/wR63mwZxwKRIZJ2LYSLP2bN4tFRzt277A9A+hBpgfcvJDi366CK+Qs m9QKdcpHwTHEK1wGXCa8KTuBBXrF5usxi551pPjhzHZ7vc/rffINYdIyutFIVGRtf9la 52N5ei0Il4EzI8mEru0DJwasDAAhottueVP6WUu3ykeDWKT2PaR2jBWUzj5jg5Q/TaTQ sxI+FnibnavLd6JgxfNNg0zONzBWUaDxn2pnvo0s/YAmwXbe4wla8o8Jt3049Kpa6B/v pHMvOWhuQQvYfzrwIBlVq8rsqi8VS+kksEdKwSQhpI2tDGC189NPFVtahAtN94j0cZ3o FJfw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WM3r9bWp; spf=pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-68982-20250516113918f48845329b4bc8c600-H9fqie@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net. [185.136.64.228]) by gmr-mx.google.com with ESMTPS id ffacd0b85a97d-3a35ca7c39asi26713f8f.5.2025.05.16.04.39.19 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 16 May 2025 04:39:19 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) client-ip=185.136.64.228; Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 20250516113918f48845329b4bc8c600 for ; Fri, 16 May 2025 13:39:19 +0200 X-Patchwork-Original-From: "'Florian Bezdeka' via isar-users" From: Florian Bezdeka To: isar-users@googlegroups.com Cc: Florian Bezdeka Subject: [PATCH] linux-custom: Fix module signing in combination with compression Date: Fri, 16 May 2025 13:38:54 +0200 Message-Id: <20250516113854.1515596-1-florian.bezdeka@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-68982:519-21489:flowmailer X-Original-Sender: florian.bezdeka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WM3r9bWp; spf=pass (google.com: domain of fm-68982-20250516113918f48845329b4bc8c600-h9fqie@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-68982-20250516113918f48845329b4bc8c600-H9fqie@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Florian Bezdeka Reply-To: Florian Bezdeka Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= The right order for each non-debug module is INSTALL, STRIP, SIGN, COMPRESS. As "make modules_sign" is a subset of "make modules_install" the order was different, basically trying to re-sign after COMPRESS already happended, which triggered a build failure like + kmods_sign + '[' -n y ']' + /usr/bin/make O=/<>/build-full INSTALL_MOD_PATH=/<>/debian/linux-image-stable-rt modules_sign make[2]: Entering directory '/<>' make[3]: Entering directory '/<>/build-full' SIGN /<>/debian/linux-image-stable-rt/lib/modules/6.14.0/kernel/arch/x86/events/amd/power.ko At main.c:302: - SSL error:FFFFFFFF80000002:system library::No such file or directory: ../crypto/bio/bss_file.c:67 - SSL error:10000080:BIO routines::no such file: ../crypto/bio/bss_file.c:75 sign-file: /<>/debian/linux-image-stable-rt/lib/modules/6.14.0/kernel/arch/x86/events/amd/power.ko Align the installation of the debug version of modules with the build process of Debian by using modules_install again, with a different installation directory and signing and compression disabled. Signed-off-by: Florian Bezdeka --- Hi all, this has been tested with Linux 6.14 and 6.12. Older versions should work as well, more testing highly recommended. Best regards, Florian .../linux/files/debian/isar/install.tmpl | 28 +++++++------------ 1 file changed, 10 insertions(+), 18 deletions(-) diff --git a/meta/recipes-kernel/linux/files/debian/isar/install.tmpl b/meta/recipes-kernel/linux/files/debian/isar/install.tmpl index 00011517..818da49c 100644 --- a/meta/recipes-kernel/linux/files/debian/isar/install.tmpl +++ b/meta/recipes-kernel/linux/files/debian/isar/install.tmpl @@ -129,34 +129,26 @@ install_dtbs() { install_kmods() { [ -n "${CONFIG_MODULES}" ] || return 0 - ${MAKE} O=${O} INSTALL_MOD_PATH=${deb_img_dir} modules_install + ${MAKE} O=${O} modules_install \ + INSTALL_MOD_PATH=${deb_img_dir} \ + INSTALL_MOD_STRIP=1 touch ${deb_img_dir}/lib/modules/${krel}/.fresh-install rm -fv ${deb_img_dir}/lib/modules/${krel}/build rm -fv ${deb_img_dir}/lib/modules/${krel}/source install_kmods_debug } -kmods_sign() { - [ -n "${CONFIG_MODULE_SIG_ALL}" ] || return 0 - ${MAKE} O=${O} INSTALL_MOD_PATH=${deb_img_dir} modules_sign -} - install_kmods_debug() { [ -n "${CONFIG_DEBUG_INFO}" ] || return 0 - kmod_inst_dir=${deb_img_dir}/lib/modules - kmod_debug_dir=${deb_dbg_dir}/usr/lib/debug - - # copy kernels modules to usr/lib/debug - mkdir -p ${kmod_debug_dir} - tar -C ${kmod_inst_dir}/ -cO --exclude='modules.*' . | tar -C ${kmod_debug_dir}/ -xf - - # strip everything but debug sections for modules in usr/lib/debug - find ${kmod_debug_dir} -name *.ko -exec ${CROSS_COMPILE}objcopy --only-keep-debug {} \; - # and strip debug sections from modules in lib/modules - find ${kmod_inst_dir} -name *.ko -exec ${CROSS_COMPILE}objcopy --strip-debug {} \; + kmod_inst_dir=${deb_dbg_dir}/usr/lib/debug - # re-sign stripped kernel modules - kmods_sign + # cmd_sign=: Don't sign modules + # suffix-y=: Don't compress modules + ${MAKE} O=${O} modules_install \ + INSTALL_MOD_PATH=${kmod_inst_dir} \ + cmd_sign= \ + suffix-y= } headers_check() {