app-admin/ryzen_smu does not sign module (if kernel module signing is enabled), so the kernel cannot load the module: modprobe: ERROR: could not insert 'ryzen_smu': Key was rejected by service dmesg: Loading of unsigned module is rejected tried on various different systems with different AMD CPUs and mixtures of 5.10.87 and 5.15.10 I looked at the zfs-kmod ebuild (which properly signs its module) and couldn't at first glance see anything it does specifically for that. Reproducible: Always Steps to Reproduce: 1. emerge ryzen_smu # on linux kernel with module signing enabled 2. modprobe ryzen_smu Actual Results: modprobe: ERROR: could not insert 'ryzen_smu': Key was rejected by service dmesg: Loading of unsigned module is rejected Expected Results: modprobe should work module not signed if kernel module signing enabled, which e.g. zfs-kmod does properly
Perhaps the build system have logic to sign them on install. I will look into it.
like I said, e.g. zfs-kmod does it properly, so the method should be there
Your comment was so unnecessary. Please refrain from adding comments with those 'like I said' of yours unless they have any meaningful input.
I think you are over-interpreting (?), sorry for any misunderstanding, English is not my native language, no offense meant! :) What I meant was, since you posted "Perhaps the build system have logic to sign them" I thought you maybe did not see, that zfs-kmod seems to do this successfully, so I wanted to save you time/work. But maybe I wrongly interpreted that you did not see this hint, so I hope this clarifies it :) Thanks for your effort!
Hadn't noticed there was a bug for this, should be fixed by the test migration to linux-mod-r1 (with USE=modules-sign) from: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0d61c12173e779de87882aa5310edf83f1de4e89 Likely be some time before every ebuilds migrate though. Just happened to pick this one.
Haven't noticed linux-mod-r1 being a thing. Tested your change, builds and loads just fine on clang-lto-built kernel, good staff. You might want to look into getting it into nvidia-drivers, it would help simplify it.
(In reply to Piotr Karbowski from comment #6) > Haven't noticed linux-mod-r1 being a thing. Tested your change, builds and > loads just fine on clang-lto-built kernel, good staff. You might want to > look into getting it into nvidia-drivers, it would help simplify it. Certainly planned, already have a test migration for nvidia that came with the PR at https://github.com/gentoo/gentoo/pull/31154 Just needs bit more polishing/testing for final version which will push soon'ish.
