Kernel module not signed with secure boot key in 22.10/kinetic

Bug #1992673 reported by Marian Rainer-Harbach
This bug report is a duplicate of:  Bug #1991725: fails to sign kernel modules. Edit Remove
52
This bug affects 10 people
Affects Status Importance Assigned to Milestone
nvidia-graphics-drivers-515 (Ubuntu)
Confirmed
Undecided
Unassigned
v4l2loopback (Ubuntu)
Confirmed
Undecided
Unassigned
virtualbox (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

It seems that the VirtualBox kernel modules are not automatically signed with the machine owner key in Ubuntu 22.10/kinetic anymore.

# modprobe vboxdrv
modprobe: ERROR: could not insert 'vboxdrv': Key was rejected by service

# mokutil --sb-state
SecureBoot enabled

# mokutil --test-key /var/lib/shim-signed/mok/MOK.der
/var/lib/shim-signed/mok/MOK.der is already enrolled

The same setup and key worked in Ubuntu 22.04.

Installed versions:
virtualbox: 6.1.38-dfsg-3
virtualbox-dkms: 6.1.38-dfsg-3

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in virtualbox (Ubuntu):
status: New → Confirmed
Revision history for this message
Billy Kwong (tuppa) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in nvidia-graphics-drivers-515 (Ubuntu):
status: New → Confirmed
Changed in v4l2loopback (Ubuntu):
status: New → Confirmed
Revision history for this message
Marian Rainer-Harbach (marianrh) wrote :

I guess this is a duplicate of bug #1991725.

Revision history for this message
Jorge Pérez Lara (jorgesgk) wrote :

Please check this solution: It worked for me:

https://discourse.ubuntu.com/t/dkms-package-support-extra-drivers-does-not-work-in-ubuntu-22-10-install-media/31655

There's a typo, though. The command should be:

sudo kmodsign sha512 /var/lib/shim-signed/mok/MOK.priv /var/lib/shim-signed/mok/MOK.der /lib/modules/5.19.0-23-generic/updates/dkms/wl.ko

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.