Tumbleweed Virtualbox Sexure boot Key was rejected by service

When I have tried to install Virtualbox on Switched on Secure Boot, I was not able to install it.
When I have executed the command : /usr/lib/virtualbox/vboxdrv.sh

insmod /usr/lib/modules/6.7.6-4.g1c8bab3-default/misc/vboxdrv.ko
modprobe: ERROR: could not insert ‘vboxnetflt’: Key was rejected by service
insmod /usr/lib/modules/6.7.6-4.g1c8bab3-default/misc/vboxdrv.ko
modprobe: ERROR: could not insert ‘vboxnetadp’: Key was rejected by service
Kernel modules are installed and loaded.
vboxdrv.sh: failed: modprobe vboxdrv failed. Please use ‘dmesg’ to find out why.

This is no Tumbleweed kernel…

Post:
zypper lr -d
zypper se -si kernel virtualbox

Looks like he built it himself and they are not signed with OpenSUSE - If he wants to do that he needs to turn off secure boot in the BIOS.

I have to do that to test VirtualBox builds.

localhost:/home/ # zypper lr -d
#  | Alias                            | Name                                   | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                          | Service
---+----------------------------------+----------------------------------------+---------+-----------+---------+----------+--------+------------------------------------------------------------------------------+---------
 1 | Kernel:stable                    | Kernel:stable                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/Kernel:/stable/standard/          | 
 2 | Kernel:stable:KMP                | Kernel:stable:KMP                      | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/Kernel:/stable:/KMP/standard/     | 
 3 | NVIDIA                           | NVIDIA                                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.nvidia.com/opensuse/tumbleweed                              | 
 4 | NVIDIA:repo-non-free             | repo-non-free                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.nvidia.com/opensuse/tumbleweed/                             | NVIDIA
 5 | X11:Wayland.repo                 | X11:Wayland.repo                       | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/X11:/Wayland/openSUSE_Tumbleweed/ | 
 6 | X11:XOrg.repo                    | X11:XOrg.repo                          | Yes     | (r ) Yes  | No      |   99     | rpm-md | https://download.opensuse.org/repositories/X11:/XOrg/openSUSE_Tumbleweed/    | 
 7 | download.opensuse.org-non-oss    | Main Repository (NON-OSS)              | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/tumbleweed/repo/non-oss/                       | 
 8 | download.opensuse.org-oss        | Main Repository (OSS)                  | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/tumbleweed/repo/oss/                           | 
 9 | download.opensuse.org-tumbleweed | Main Update Repository                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/update/tumbleweed/                             | 
10 | openSUSE:repo-non-oss            | repo-non-oss                           | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://cdn.opensuse.org/tumbleweed//repo/non-oss                             | openSUSE
11 | openSUSE:repo-openh264           | repo-openh264                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://codecs.opensuse.org/openh264/openSUSE_Tumbleweed                      | openSUSE
12 | openSUSE:repo-oss                | repo-oss                               | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://cdn.opensuse.org/tumbleweed//repo/oss                                 | openSUSE
13 | openSUSE:repo-oss-debug          | repo-oss-debug                         | No      | ----      | ----    |   99     | N/A    | http://cdn.opensuse.org/debug/tumbleweed//repo/oss                           | openSUSE
14 | openSUSE:repo-oss-source         | repo-oss-source                        | No      | ----      | ----    |   99     | N/A    | http://cdn.opensuse.org/source/tumbleweed//repo/oss                          | openSUSE
15 | openSUSE:update-tumbleweed       | update-tumbleweed                      | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://cdn.opensuse.org/update/tumbleweed/                                   | openSUSE
16 | repo-debug                       | openSUSE-Tumbleweed-Debug              | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/debug/tumbleweed/repo/oss/                     | 
17 | repo-openh264                    | Open H.264 Codec (openSUSE Tumbleweed) | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://codecs.opensuse.org/openh264/openSUSE_Tumbleweed                      | 
18 | repo-source                      | openSUSE-Tumbleweed-Source             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/source/tumbleweed/repo/oss/                    | 
localhost:/home/ivonenchev/Свалени # zypper se -si kernel virtualbox
Loading repository data...
Reading installed packages...

S  | Name                             | Type    | Version                       | Arch   | Repository
---+----------------------------------+---------+-------------------------------+--------+----------------------
i+ | devel_kernel                     | pattern | 20170319-12.3                 | x86_64 | Main Repository (OSS)
i+ | devel_kernel                     | pattern | 20170319-12.3                 | x86_64 | repo-oss
i+ | kernel-default                   | package | 6.7.6-4.1.g1c8bab3            | x86_64 | Kernel:stable
i+ | kernel-default                   | package | 6.7.6-1.1                     | x86_64 | Main Repository (OSS)
i+ | kernel-default                   | package | 6.7.6-1.1                     | x86_64 | repo-oss
i  | kernel-default-devel             | package | 6.7.6-4.1.g1c8bab3            | x86_64 | Kernel:stable
i  | kernel-devel                     | package | 6.7.6-4.1.g1c8bab3            | noarch | Kernel:stable
i  | kernel-firmware-all              | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-amdgpu           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-ath10k           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-ath11k           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-ath12k           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-atheros          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-bluetooth        | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-bnx2             | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-brcm             | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-chelsio          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-dpaa2            | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-i915             | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-intel            | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-iwlwifi          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-liquidio         | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-marvell          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-media            | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-mediatek         | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-mellanox         | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-mwifiex          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-network          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-nfp              | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-nvidia           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-platform         | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-prestera         | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-qcom             | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-qlogic           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-radeon           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-realtek          | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-serial           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-sound            | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-ti               | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-ueagle           | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-firmware-usb-network      | package | 20240220-35.1                 | noarch | Kernel:stable
i  | kernel-install-tools             | package | 0.3.0-2.3                     | x86_64 | Main Repository (OSS)
i  | kernel-install-tools             | package | 0.3.0-2.3                     | x86_64 | repo-oss
i  | kernel-macros                    | package | 6.7.6-4.1.g1c8bab3            | noarch | Kernel:stable
i  | kernel-source                    | package | 6.7.6-4.1.g1c8bab3            | noarch | Kernel:stable
i  | kernel-syms                      | package | 6.7.6-4.1.g1c8bab3            | x86_64 | Kernel:stable
i+ | patterns-devel-base-devel_kernel | package | 20170319-12.3                 | x86_64 | Main Repository (OSS)
i+ | patterns-devel-base-devel_kernel | package | 20170319-12.3                 | x86_64 | repo-oss
i  | purge-kernels-service            | package | 0-9.6                         | noarch | Main Repository (OSS)
i  | purge-kernels-service            | package | 0-9.6                         | noarch | repo-oss
i+ | virtualbox                       | package | 7.0.14-4.11                   | x86_64 | (System Packages)
i+ | virtualbox-host-source           | package | 7.0.14-4.11                   | noarch | (System Packages)
i  | virtualbox-kmp-default           | package | 7.0.14_k6.7.6_4.g1c8bab3-4.11 | x86_64 | (System Packages)
i  | virtualbox-qt                    | package | 7.0.14-4.11                   | x86_64 | (System Packages)
localhost:/home/ #

It is kernel of OpenSuse

Why kernel:stable and Kernel:stable:KMP?

And Nvidia Repo which only match to the kernel from Tumbleweed and not kernel:stable.

Also please use Code-Tags, it make things easier:

Code-Tags

Because I want to use the latest kernel version

@john_neo switch to libvirt/virt-manager?

Have you enrolled the Key to UEFI?

See here:
Mok Example

mokutil --import /etc/uefi/certs/9E1329A9.crt --root-pw

Reboot and enroll.

You have not to execute a command, a reboot will do it.

Where I can find out a guide, about how to install virtualbox in secure boot mode and how to sign in the modules in kernel?

When I have executed the command : /usr/lib/virtualbox/vboxdrv.sh

That rebuilt the virtualbox code - that is only for Oracle Installs

zypper rm virtualbox virtualbox-kmp-default

reboot to remove the unsigned virtualbox you built

zypper in virtualbox

reboot and the OpenSUSE signed vitualbox will be loaded

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.