LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Hardware
User Name
Password
Linux - Hardware This forum is for Hardware issues.
Having trouble installing a piece of hardware? Want to know if that peripheral is compatible with Linux?

Notices


Reply
  Search this Thread
Old 01-20-2019, 04:27 PM   #1
madhavramdin
LQ Newbie
 
Registered: Apr 2013
Posts: 10

Rep: Reputation: Disabled
Ubuntu 18.04 LTS Desktop - PKCS#7 signature not signed with a trusted key - NVIDIA GPU


Dear Team,

Since a few weeks I have installed ubuntu 18.04 desktop on a workstation with nvidia Tesla GPU installed. However, I am stuck in a bootloop and can't login to the OS.
After adding 'nomodeset' in GRUB, I am able to boot the OS with the message below several times on startup:

PKCS#7 signature not signed with a trusted key

dmesg logs below:

dmesg -T | grep nvidia
[Fri Jan 18 17:21:11 2019] nvidia: loading out-of-tree module taints kernel.
[Fri Jan 18 17:21:11 2019] nvidia: module license 'NVIDIA' taints kernel.
[Fri Jan 18 17:21:11 2019] nvidia: module verification failed: signature and/or required key missing - tainting kernel



dmesg -T | grep -C 3 PKCS
[Fri Jan 18 17:21:11 2019] PKCS#7 signature not signed with a trusted key
[Fri Jan 18 17:21:11 2019] nvidia: loading out-of-tree module taints kernel.
[Fri Jan 18 17:21:11 2019] nvidia: module license 'NVIDIA' taints kernel.
[Fri Jan 18 17:21:11 2019] Disabling lock debugging due to kernel taint



I have seen several posts whereby a key must be created and trusted via mokutil but I am not convinced about this as it have never encountered this issue before.

Can anyone advise please?
 
Old 01-21-2019, 02:04 PM   #2
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 11,025
Blog Entries: 7

Rep: Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777
i think the proprietary nvidia driver will always taint the kernel; maybe these messages are not the problem? they aren't even marked as errors. it even says "- tainting kernel" which means: "i am going ahead and do this now".

a bootloop?
i have never, ever heard of a bootloop on a Linux system.

Please clarify, give us a better problem description.
read the first link in my signature.
 
1 members found this post helpful.
Old 01-22-2019, 10:11 AM   #3
madhavramdin
LQ Newbie
 
Registered: Apr 2013
Posts: 10

Original Poster
Rep: Reputation: Disabled
Hi,

The Ubuntu startup screen was stuck on blank screen and never booted up (not a boot loop - thank you for correcting me!)

I booted into recovery mode this time, to see all the messages in the startup and I found the culprit (I don't have a screenshot as the message is no longer in syslog):

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
nvidia-modeset xxxx

Indeed you were right. The PKCS was not the problem this whole time, it was a kernel issue with the Nvidia driver (I'm using nvidia-410)

I did three things:

1) Changed the value to 0 in /proc/sys/kernel/hung_task_timeout_secs
Noticed a server hang after a few hours of operation

2) Changed the drivers - all nvidia drivers from ppa were giving the same error message on boot

3) Changed the sysctl values as below:

$ sudo sysctl -w vm.dirty_ratio=10
$ sudo sysctl -w vm.dirty_background_ratio=5
$ sudo sysctl -p

I referred the link below:

https://www.blackmoreops.com/2014/09...conds-problem/

The server is working ok till now - I will monitor the performance to make it permanent if this is really the fix.


Anyhow, I'd like to understand the issue in depth.

I hope if is clearer now. Please let me know what I can check to gather more information.

Many thanks in advance
 
Old 02-08-2019, 07:14 AM   #4
madhavramdin
LQ Newbie
 
Registered: Apr 2013
Posts: 10

Original Poster
Rep: Reputation: Disabled
Smile

Hey!

Just wanted to post this in case anyone else is having the same issue.
I tried a lot of tweaking but the OS was never stable.

So I tried one thing: reverting to an older kernel and the issue was fixed!
Hope this helps someone out there
 
Old 02-08-2019, 11:38 PM   #5
Brains
Member
 
Registered: Apr 2009
Distribution: Debian testing
Posts: 952

Rep: Reputation: 239Reputation: 239Reputation: 239
Your best bet would have been to follow the first suggestion in this tutorial ---> Automatic Install using standard Ubuntu Repository
The option you chose, #2, states: "Using graphics-drivers PPA repository allows us to install bleeding edge Nvidia beta drivers at the risk of unstable system".

Because Nvidia Tesla release was 13 years ago, the best drivers would have been the proven stable, recommended drivers available from standard Ubuntu repositories. The "bleeding edge" 410 drivers did not add any hardware components to your 13 year old graphics device and as such... did not give your old graphics device any extra functionality over the stable driver, it only succeeded in giving you what is highlighted above in red. You could be running the latest stable Ubuntu kernel for Bionic Beaver.
 
Old 02-09-2019, 09:24 AM   #6
madhavramdin
LQ Newbie
 
Registered: Apr 2013
Posts: 10

Original Poster
Rep: Reputation: Disabled
Hi Brains,

Thank you for reverting back and also sending the tutorial link.
I did install via the PPA, chose the recommended drivers and sadly still got the kernel instability issues.

The solution which fixed my issue in my current config, in case anyone is pulling off his/her hair in the same situation:

'Revert back to a previous kernel!'
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Is it feasible to sign RPM/Deb using a cert issued by Trusted CA or signing with a GPG Key Pair Signed by a Trusted CA ktalinki Linux - Security 1 07-12-2018 07:46 PM
SSL - Signed vs non-Signed wh33t Linux - Security 8 06-20-2014 12:59 PM
how to create signed (not self signed) certificate for Apache ? dlugasx Linux - Server 4 12-16-2011 10:08 AM
Trying to upload manually signed packages to PPA that are showing up as not signed. Kenny_Strawn Ubuntu 3 10-14-2010 05:54 PM
Problem with sending a signed int to another signed int. Almost random number given. RHLinuxGUY Programming 8 08-15-2006 11:38 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Hardware

All times are GMT -5. The time now is 08:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration