Public bug reported:
On Ubuntu 24.04 with kernel 6.14.0-27-generic and Secure Boot enabled, the
DKMS-generated VirtualBox kernel modules (vboxdrv, vboxnetflt, vboxnetadp) are
stored as .ko.zst files under /lib/modules/.../updates/dkms/. However, these
file vboxdrv.ko.zst is either empty or incorrectly formatted — attempts to
decompress them using zstd fail with:
zstd: unsupported format
The file command identifies them as Zstandard compressed data, but they cannot
be decompressed or signed properly.
Even after signing the modules with a valid MOK certificate (successfully
enrolled via mokutil and UEFI), modprobe fails with:
modprobe: ERROR: could not insert 'vboxdrv': Key was rejected by service
Additionally, dkms status shows:
virtualbox/7.0.16, 6.14.0-27-generic, x86_64: installed (WARNING! Diff between
built and installed module!)
This issue prevents VirtualBox from functioning on systems with Secure Boot
enabled.
After running the script:
#!/bin/bash
for modfile in $(dirname $(modinfo -n vboxdrv))/*.ko; do
echo "Signing $modfile"
/usr/src/linux-headers-$(uname -r)/scripts/sign-file sha256 \
/root/signed-modules/MOK.priv \
/root/signed-modules/MOK.der "$modfile"
done
The following output appears:
root@ZALMAN1:~/signned-modules# ./sign-virtual-box
Signing /lib/modules/6.14.0-27-generic/updates/dkms/vboxdrv.ko
At main.c:171:
- SSL error:FFFFFFFF80000002:system library::No such file or directory:
../crypto/bio/bss_file.c:67
- SSL error:10000080:BIO routines::no such file: ../crypto/bio/bss_file.c:75
sign-file: /root/signed-modules/MOK.priv
Signing /lib/modules/6.14.0-27-generic/updates/dkms/vboxnetadp.ko
At main.c:171:
- SSL error:FFFFFFFF80000002:system library::No such file or directory:
../crypto/bio/bss_file.c:67
- SSL error:10000080:BIO routines::no such file: ../crypto/bio/bss_file.c:75
sign-file: /root/signed-modules/MOK.priv
Signing /lib/modules/6.14.0-27-generic/updates/dkms/vboxnetflt.ko
At main.c:171:
- SSL error:FFFFFFFF80000002:system library::No such file or directory:
../crypto/bio/bss_file.c:67
- SSL error:10000080:BIO routines::no such file: ../crypto/bio/bss_file.c:75
sign-file: /root/signed-modules/MOK.priv
ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: virtualbox 7.0.16-dfsg-2ubuntu1.1
ProcVersionSignature: Ubuntu 6.14.0-27.27~24.04.1-generic 6.14.6
Uname: Linux 6.14.0-27-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.28.1-0ubuntu3.8
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: KDE
Date: Fri Aug 1 20:40:18 2025
InstallationDate: Installed on 2025-05-23 (70 days ago)
InstallationMedia: Ubuntu 24.04.2 LTS "Noble Numbat" - Release amd64 (20250215)
SourcePackage: virtualbox
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: virtualbox (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug noble
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2119337
Title:
VirtualBox can 't load signed virtualbox kernel modul vboxdrv.ko
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/2119337/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
