Hi Eric, You wrote: [...] > kmod binaries are identical [...] > more generally, the modules that exist in the CPIO and the one in the > rootfs are identical [...] > here is my complete module config if it helps (note that I keep the > DECOMPRESS so far). > > grep CONFIG_MODULE /boot/config-6.6.83 > CONFIG_MODULES_USE_ELF_RELA=y > CONFIG_MODULE_SIG_FORMAT=y > CONFIG_MODULES=y > # CONFIG_MODULE_DEBUG is not set > CONFIG_MODULE_FORCE_LOAD=y > CONFIG_MODULE_UNLOAD=y > CONFIG_MODULE_FORCE_UNLOAD=y > # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set > # CONFIG_MODULE_SRCVERSION_ALL is not set > CONFIG_MODULE_SIG=y > # CONFIG_MODULE_SIG_FORCE is not set > CONFIG_MODULE_SIG_ALL=y > # CONFIG_MODULE_SIG_SHA1 is not set > # CONFIG_MODULE_SIG_SHA224 is not set > CONFIG_MODULE_SIG_SHA256=y > # CONFIG_MODULE_SIG_SHA384 is not set > # CONFIG_MODULE_SIG_SHA512 is not set > CONFIG_MODULE_SIG_HASH="sha256" > # CONFIG_MODULE_COMPRESS_NONE is not set > # CONFIG_MODULE_COMPRESS_GZIP is not set > CONFIG_MODULE_COMPRESS_XZ=y > # CONFIG_MODULE_COMPRESS_ZSTD is not set > CONFIG_MODULE_DECOMPRESS=y > # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set > CONFIG_MODULES_TREE_LOOKUP=y > CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" > # CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set > CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
This all matches what I used in my local test (except for the
CONFIG_MODULE_DECOMPRESS which was disabled). So I still don't
understand what's special about your configuration that results in the
failure.
Could you please send:
- The *complete* kernel config that you were using (before enabling
CONFIG_MODULE_DECOMPRESS).
- All the error messages from the initramfs when using this kernel and
initramfs-tools 0.146. (A photograph of the screen is fine, if it's
readable.)
Ben.
--
Ben Hutchings
Man invented language to satisfy his deep need to complain.
- Lily Tomlin
signature.asc
Description: This is a digitally signed message part
