Mellanox Technologies Innova IPsec, Руководство пользователя

Страница: 33 / 68

IPsec Offload Software Installation and Operation
Rev 1.8 33 Mellanox Technologies
5.1.5.2 Removing Signature from Kernel Modules
The signature can be removed from a signed kernel module using the 'strip' utility which is
provided by the 'binutils' package.
The strip utility will change the given file without saving a backup. The operation can be undo
only by resigning the kernel module. Hence, we recommend backing up a copy prior to removing
the signature.
 To remove the signature from the MLNX_OFED kernel modules:
Step 1.
Remove the signature.
After the signature has been removed, a massage as the below will no longer be pre-
sented upon module loading:
However, please note that a similar message as the following will still be presented:
This message is presented once, only for each boot for the first module that either has
no signature or whose key is not in the kernel key ring. So it's much easier to miss this
message. You won't see it on repeated tests where you unload and reload a kernel mod-
ule until you reboot. There is no way to eliminate this message.
Step 2.
Update the initramfs on RHEL systems with the stripped modules.
# strip -g my_module.ko
# rpm -qa | grep -E "kernel-ib|mlnx-ofa_kernel|iser|srp|knem" | xargs rpm -ql | grep
"\.ko$" | xargs strip -g
"Request for unknown module key 'Mellanox Technologies signing key:
61feb074fc7292f958419386ffdd9d5ca999e403' err -11"
"my_module: module verification failed: signature and/or required key missing -
tainting kernel"
mkinitrd /boot/initramfs-$(uname -r).img $(uname -r) --force