search

runfalk / synology-wireguard

WireGuard support for some Synology NAS drives
MIT License
918 stars 131 forks source link

Module verification failed, module removed #184

Open lordbah opened 8 months ago

lordbah commented 8 months ago

Description When the wireguard package is started, the module fails to verify and is removed.

Steps to reproduce

Installed WireGuard-geminilake-1.0.20220627.spk (there was not a dialog box regarding a missing digital signature) and rebooted.
root@nas:~# /var/packages/WireGuard/scripts/start
WireGuard has been successfully started
root@nas:~# cd /var/log
root@nas:/var/log# grep wireguard *
kern.log:2023-10-19T14:13:37-04:00 nas kernel: [  210.234371] wireguard: module verification failed: signature and/or required key missing - tainting kernel
kern.log:2023-10-19T14:34:08-04:00 nas kernel: [ 1441.198199] Module [wireguard] is removed.
root@nas:/var/log# lsmod | grep wireguard
wireguard             155831  0 
ipv6                  318022  154 sit,ip_vs,nf_defrag_ipv6,wireguard,nf_conntrack_ipv6
ip6_udp_tunnel          1967  2 vxlan,wireguard
udp_tunnel              2419  2 vxlan,wireguard
root@nas:/var/log# dmesg | grep wire
[  140.662678] wireguard: module verification failed: signature and/or required key missing - tainting kernel
[  140.674204] wireguard: WireGuard 1.0.20220627 loaded. See www.wireguard.com for information.
[  140.683638] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
root@nas:/var/log# wg show
root@nas:/var/log#

Expected behavior Module would load correctly.

Synology NAS model DS920+ DSM 7.2-64570 Update 3

wg0.conf

File not found.
lordbah commented 8 months ago

My first attempt to build this failed, looked like something about being unable to resolve cr.sh, whatever that might be. Tried again a few days later, without changing anything I know of, and it succeeded. Loaded that, and it still fails verification, but the module does not get removed. I have yet to be able to test it in operation. BTW the command at the bottom of https://hub.docker.com/r/blackvoidclub/synobuild72 you need to add "blackvoidclub/" in front of "synobuild72".