Leap 15.2 - Updating kernel to 5.8

English Install/Boot/Login
#1

Hello there

Due to reasons discussed in another thread on the Hardware forum (I have quite new hardware) I need to update the kernel from 5.3 (what it comes with Leap) to 5.8.

I was told this is the repository I should use

https://download.opensuse.org/repositories/Kernel:/stable/standard/x86_64/

however when I added with Yast I get an error in a pop up window as follows : “Unable to create repository” (this is all I can see in that small window)

when I try to use zypper instead using


zypper addrepo -f https://download.opensuse.org/repositories/Kernel:/stable/standard/x86_64/ kernel_stable_latest
Adding repository 'kernel_stable_latest' ..............................................................................................................................................................................................................[done]
Repository 'kernel_stable_latest' successfully added

URI         : https://download.opensuse.org/repositories/Kernel:/stable/standard/x86_64/
Enabled     : Yes
GPG Check   : Yes
Autorefresh : Yes
Priority    : 99 (default priority)

Repository priorities are without effect. All enabled repositories share the same priority.

but the if I try to find the repository with


Retrieving repository 'kernel_stable_latest' metadata ................................................................................................................................................................................................[error]
Repository 'kernel_stable_latest' is invalid.
[kernel_stable_latest|https://download.opensuse.org/repositories/Kernel:/stable/standard/x86_64/] Valid metadata not found at specified URL
History:
 - [kernel_stable_latest|https://download.opensuse.org/repositories/Kernel:/stable/standard/x86_64/] Repository type can't be determined.

Please check if the URIs defined for this repository are pointing to a valid repository.
Warning: Skipping repository 'kernel_stable_latest' because of the above error.
Some of the repositories have not been refreshed because of an error.
Loading repository data...
Reading installed packages...

S  | Name                        | Type       | Version                       | Arch   | Repository
---+-----------------------------+------------+-------------------------------+--------+-----------------------
i+ | kernel-default              | package    | 5.3.18-lp152.33.1             | x86_64 | Main Update Repository
v  | kernel-default              | package    | 5.3.18-lp152.26.2             | x86_64 | Main Update Repository
v  | kernel-default              | package    | 5.3.18-lp152.19.2             | x86_64 | Main Repository
   | kernel-default              | srcpackage | 5.3.18-lp152.33.1             | noarch | Main Update Repository
   | kernel-default              | srcpackage | 5.3.18-lp152.26.2             | noarch | Main Update Repository
   | kernel-default-base         | package    | 5.3.18-lp152.33.1.lp152.8.4.4 | x86_64 | Main Update Repository
   | kernel-default-base         | package    | 5.3.18-lp152.26.2.lp152.8.2.2 | x86_64 | Main Update Repository
   | kernel-default-base         | package    | 5.3.18-lp152.19.2.lp152.7.12  | x86_64 | Main Repository
   | kernel-default-base         | srcpackage | 5.3.18-lp152.33.1.lp152.8.4.4 | noarch | Main Update Repository
   | kernel-default-base         | srcpackage | 5.3.18-lp152.26.2.lp152.8.2.2 | noarch | Main Update Repository
   | kernel-default-base-rebuild | package    | 5.3.18-lp152.33.1.lp152.8.4.4 | x86_64 | Main Update Repository
   | kernel-default-base-rebuild | package    | 5.3.18-lp152.26.2.lp152.8.2.2 | x86_64 | Main Update Repository
   | kernel-default-base-rebuild | package    | 5.3.18-lp152.19.2.lp152.7.12  | x86_64 | Main Repository
   | kernel-default-devel        | package    | 5.3.18-lp152.33.1             | x86_64 | Main Update Repository
   | kernel-default-devel        | package    | 5.3.18-lp152.26.2             | x86_64 | Main Update Repository
   | kernel-default-devel        | package    | 5.3.18-lp152.19.2             | x86_64 | Main Repository

Questions

  1. What am I doing wrong?

  2. or perhaps the URI I got is not a repository?

I also tried to download the 5.8 kernel I want to install and I get an error “Resource is no longer available.”

If I try to download the 5.6 kernel then it works.

Any help will be appreciated.

#2

Just eliminate the “/x86_64/” at the end.

Regards

susejunky

#3

That’s wrong.

You should leave out the “x86_64/” at the end of that URL.

The directory “x86_64” does exist. But when you define the repo that way, it looks for the metadata in that directory. And that’s one directory too far.

Leave off the “x86_64/” from the url, and you should be fine.

#4

I see that our replies collided. But we both gave the same advice.

#5

Thank you very much for the quick response. It was my fault as I added the last part of the URI while browsing.

#6

Thank you very much for the quick response. It was my fault as I added the last part of the URI while browsing.

#7

Dear colleagues, has anyone been successful in installing Kernel 5.8 on OpenSUSE 15.2? I have installed the kernel from this repo but when I try to load it in grub I get “bad shim signature”. How could I overcome that? Please help. Kind regards, Oleksii

#8

If that happens, it’s a bug. I’ll test it shortly, and see whether that happens here.

If you disable secure-boot, it should work.

#9

Okay, I installed kernel 5.8.5-2.g34111a4-default

I rebooted. And it reboots just fine (with secure-boot enabled). So I don’t think there’s a bug.

HOWEVER:

On reboot, I got the MokManager blue screen asking if I want to install a new key. I said “yes”, and went ahead with that. When prompted for a password, I entered the root password.

I am guessing that you saw the same screen, but you did not add the password. And that “bad signature” is likely because shim cannot verify the signature on the new kernel unless you add that key to MokManager.

It looks as if the new key to be added is “/etc/uefi/certs/1AA60533.crt”.

If I am right about what happened, then you can try again to add that key. As root, use the command:


mokutil --root-pw --import /etc/uefi/certs/1AA60533.crt

That should bring up the blue MokManager screen at next boot, and you get another chance to add that key. Then, on reboot the new 5.8 kernel should work.

I guess I should add that, if you fumble when doing that, you can still boot the old kernel and then repeat the steps to add the key.

#10

Thanks, indeed, disabling secure boot helped!