synology-wireguard icon indicating copy to clipboard operation
synology-wireguard copied to clipboard

Module verification failed, module removed

Open lordbah opened this issue 1 year ago • 1 comments

Description When the wireguard package is started, the module fails to verify and is removed.

Steps to reproduce

Installed WireGuard-geminilake-1.0.20220627.spk (there was not a dialog box regarding a missing digital signature) and rebooted.
root@nas:~# /var/packages/WireGuard/scripts/start
WireGuard has been successfully started
root@nas:~# cd /var/log
root@nas:/var/log# grep wireguard *
kern.log:2023-10-19T14:13:37-04:00 nas kernel: [  210.234371] wireguard: module verification failed: signature and/or required key missing - tainting kernel
kern.log:2023-10-19T14:34:08-04:00 nas kernel: [ 1441.198199] Module [wireguard] is removed.
root@nas:/var/log# lsmod | grep wireguard
wireguard             155831  0 
ipv6                  318022  154 sit,ip_vs,nf_defrag_ipv6,wireguard,nf_conntrack_ipv6
ip6_udp_tunnel          1967  2 vxlan,wireguard
udp_tunnel              2419  2 vxlan,wireguard
root@nas:/var/log# dmesg | grep wire
[  140.662678] wireguard: module verification failed: signature and/or required key missing - tainting kernel
[  140.674204] wireguard: WireGuard 1.0.20220627 loaded. See www.wireguard.com for information.
[  140.683638] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <[email protected]>. All Rights Reserved.
root@nas:/var/log# wg show
root@nas:/var/log# 

Expected behavior Module would load correctly.

Synology NAS model DS920+ DSM 7.2-64570 Update 3

wg0.conf

File not found.

lordbah avatar Oct 19 '23 19:10 lordbah

My first attempt to build this failed, looked like something about being unable to resolve cr.sh, whatever that might be. Tried again a few days later, without changing anything I know of, and it succeeded. Loaded that, and it still fails verification, but the module does not get removed. I have yet to be able to test it in operation. BTW the command at the bottom of https://hub.docker.com/r/blackvoidclub/synobuild72 you need to add "blackvoidclub/" in front of "synobuild72".

lordbah avatar Oct 24 '23 03:10 lordbah