google / gasket-driver

GNU General Public License v2.0
47 stars 29 forks source link

Failed to insert module 'gasket|apex': Key was rejected by service #11

Open raintonr opened 1 year ago

raintonr commented 1 year ago

Am using the fork by @robertzaage on Fedora (FC38) - https://github.com/robertzaage/gasket-driver installed from copr - https://copr.fedorainfracloud.org/coprs/robertzaage/gasket-dkms.

While lspci -vvv shows my Coral Edge installed, and the apex kernel module is listed there (although gasket is not!), neither are loaded (verified with lsmod | grep -E 'gasket|apex').

Looking further, one sees in systemctl status systemd-modules-load.service these errors:

Apr 22 18:10:16 host systemd-modules-load[602]: Failed to insert module 'gasket': Key was rejected by service
Apr 22 18:10:16 host systemd-modules-load[602]: Failed to insert module 'apex': Key was rejected by service

Similar to https://github.com/google-coral/edgetpu/issues/407 but for reasons beyond my control cannot disable secure boot on this system to see if that workaround solves this :cry:

robertzaage commented 1 year ago

Hmm, I just digged a little into this topic. Looks like the whole signing thing is done on users side: https://github.com/dell/dkms#secure-boot

@raintonr Can you give this mokutil steps a try?

raintonr commented 1 year ago

Sadly I cannot use the BIOS/console on this machine so can't check :disappointed:

However, I did get the RPMs from @robertzaage working on another machine that I can disable secure boot on, so looks like that may well be the issue.

robertzaage commented 1 year ago

I guess you have no luck here, if you can't access your UEFI to enroll a MOK cert. But I'm still glad to hear that the copr RPM works well on your other machine! 🙂