NVIDIA drivers aren't running after fresh groovy install with Secure Boot enabled

Bug #1900865 reported by Marco Trevisan (Treviño)
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux-restricted-modules (Ubuntu)
Confirmed
Critical
Unassigned
nvidia-graphics-drivers-455 (Ubuntu)
Confirmed
Undecided
Unassigned
ubiquity (Ubuntu)
Invalid
High
Unassigned

Bug Description

Ran an installation enabling nvidia drivers setup, at reboot I used my key to sign it...

However the module can't be loaded on reboot:

[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
[ 0.969187] Lockdown: swapper/0: hibernation is restricted; see man kernel_lockdown.7
[ 2.445463] Lockdown: systemd: /dev/mem,kmem,port is restricted; see man kernel_lockdown.7
[ 3.197078] Lockdown: systemd-udevd: unsigned module loading is restricted; see man kernel_lockdown.7
[ 3.555760] Lockdown: systemd-udevd: unsigned module loading is restricted; see man kernel_lockdown.7
[ 7.522144] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 11.260801] Lockdown: systemd-logind: hibernation is restricted; see man kernel_lockdown.7
[ 22.069746] Lockdown: systemd-logind: hibernation is restricted; see man kernel_lockdown.7
[ 23.863146] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 24.152678] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 198.092912] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7
[ 4870.953205] Lockdown: modprobe: unsigned module loading is restricted; see man kernel_lockdown.7

Module should be signed though:

marco@marco-HP-Pavilion-Notebook-15-bc5xxx:~$ modinfo nvidia
filename: /lib/modules/5.8.0-25-generic/updates/dkms/nvidia.ko
alias: char-major-195-*
version: 455.28
supported: external
license: NVIDIA
srcversion: 9C3C7EC5A6962563520EEFD
alias: pci:v000010DEd*sv*sd*bc03sc02i00*
alias: pci:v000010DEd*sv*sd*bc03sc00i00*
depends:
retpoline: Y
name: nvidia
vermagic: 5.8.0-25-generic SMP mod_unload
sig_id: PKCS#7
signer: ubuntu Secure Boot Module Signature key
sig_key: 10:CE:AB:F5:60:0E:86:AA:FB:81:9B:80:D5:9E:11:32:B3:BF:86:B1
sig_hashalgo: sha512
signature: 57:C9:02:C9:D6:46:8A:F5:A5:B8:14:EF:2F:00:54:37:25:B3:24:0C:
  FF:12:6A:50:FC:91:E4:5F:16:7B:5E:95:9E:E1:5E:A2:F1:FC:8A:17:
  E3:36:86:00:CC:04:5A:9E:71:28:CC:A1:18:FE:27:FE:FF:9D:BE:D7:
  7E:7E:0F:0D:EF:EE:BC:AE:8B:0C:77:53:50:7C:C0:70:90:D1:B9:7B:
  6D:C4:FE:C0:62:88:A7:01:30:07:95:92:87:9C:E7:E5:37:74:1E:22:
  EB:17:E7:35:49:26:64:E5:92:22:5F:FA:DB:84:7A:DA:1D:D2:0C:F1:
  05:55:89:92:10:7F:9B:F1:A6:04:B4:CD:16:98:92:56:3A:35:3B:E9:
  BB:26:03:02:F9:80:23:AA:24:2B:30:E8:BE:40:87:B9:7A:DB:BF:E2:
  A2:EB:3D:EB:13:55:A3:B9:0A:18:EA:3B:67:A8:A5:85:79:01:D6:A3:
  47:8F:50:C3:18:DF:BD:AF:B4:2A:04:88:AE:A5:61:7E:86:B7:E2:D9:
  9B:CF:DE:BE:33:27:A3:0A:E2:A2:F0:9F:E9:16:58:04:68:82:F5:3C:
  31:42:50:6F:FC:51:09:E7:BE:16:52:41:00:C8:9E:42:D0:25:F8:CD:
  4E:90:89:B8:44:64:A7:8E:D6:07:C2:29:4D:F0:43:DF
parm: NvSwitchRegDwords:NvSwitch regkey (charp)
parm: NvSwitchBlacklist:NvSwitchBlacklist=uuid[,uuid...] (charp)
parm: nv_cap_enable_devfs:Enable (1) or disable (0) nv-caps devfs support. Default: 1 (int)
parm: NVreg_ResmanDebugLevel:int
parm: NVreg_RmLogonRC:int
parm: NVreg_ModifyDeviceFiles:int
parm: NVreg_DeviceFileUID:int
parm: NVreg_DeviceFileGID:int
parm: NVreg_DeviceFileMode:int
parm: NVreg_InitializeSystemMemoryAllocations:int
parm: NVreg_UsePageAttributeTable:int
parm: NVreg_RegisterForACPIEvents:int
parm: NVreg_EnablePCIeGen3:int
parm: NVreg_EnableMSI:int
parm: NVreg_TCEBypassMode:int
parm: NVreg_EnableStreamMemOPs:int
parm: NVreg_EnableBacklightHandler:int
parm: NVreg_RestrictProfilingToAdminUsers:int
parm: NVreg_PreserveVideoMemoryAllocations:int
parm: NVreg_DynamicPowerManagement:int
parm: NVreg_DynamicPowerManagementVideoMemoryThreshold:int
parm: NVreg_EnableUserNUMAManagement:int
parm: NVreg_MemoryPoolSize:int
parm: NVreg_KMallocHeapMaxSize:int
parm: NVreg_VMallocHeapMaxSize:int
parm: NVreg_IgnoreMMIOCheck:int
parm: NVreg_NvLinkDisable:int
parm: NVreg_EnablePCIERelaxedOrderingMode:int
parm: NVreg_RegisterPCIDriver:int
parm: NVreg_RegistryDwords:charp
parm: NVreg_RegistryDwordsPerDevice:charp
parm: NVreg_RmMsg:charp
parm: NVreg_GpuBlacklist:charp
parm: NVreg_TemporaryFilePath:charp
parm: NVreg_AssignGpus:charp

ProblemType: Bug
DistroRelease: Ubuntu 20.10
Package: ubiquity (not installed)
ProcVersionSignature: Ubuntu 5.8.0-25.26-generic 5.8.14
Uname: Linux 5.8.0-25-generic x86_64
ApportVersion: 2.20.11-0ubuntu50
Architecture: amd64
CasperMD5CheckResult: skip
Date: Wed Oct 21 17:05:48 2020
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz file=/cdrom/preseed/ubuntu.seed maybe-ubiquity quiet splash ---
InstallationDate: Installed on 2020-10-21 (0 days ago)
InstallationMedia: Ubuntu 20.10 "Groovy Gorilla" - Release amd64 (20201020)
SourcePackage: ubiquity
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Marco Trevisan (Treviño) (3v1n0) wrote :
Revision history for this message
Dimitri John Ledkov (xnox) wrote :

Two things:

1) Old iso used, which had dkms bit fixed in the 21 iso.

2) nvidia-graphics-drivers-455 got built and migrated with a matching lrm.....

nvidia-graphics-drivers-455 must have never migrated to groovy-release without lrm....

Changed in linux-restricted-modules (Ubuntu):
importance: Undecided → Critical
Iain Lane (laney)
Changed in ubiquity (Ubuntu):
status: New → Invalid
tags: added: block-proposed-groovy
Revision history for this message
Iain Lane (laney) wrote :

Removing 455 from groovy to groovy-proposed to fix (2).

Revision history for this message
Dimitri John Ledkov (xnox) wrote :
Revision history for this message
Ubuntu QA Website (ubuntuqa) wrote :

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
http://iso.qa.ubuntu.com/qatracker/reports/bugs/1900865

tags: added: iso-testing
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux-restricted-modules (Ubuntu):
status: New → Confirmed
Changed in nvidia-graphics-drivers-455 (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.