livepatch 失败,错误为“无法应用补丁:无法应用更新:无法执行 finitModule 系统调用:所需密钥不可用”

livepatch 失败,错误为“无法应用补丁:无法应用更新:无法执行 finitModule 系统调用:所需密钥不可用”

我正在运行 canonical-livepatch,但它显示以下错误消息。首先,它尝试更新时出现错误cannot apply patches: cannot apply update: cannot execute finitModule syscall: required key not available。失败后,它拒绝再次尝试更新。

应用更新时可能存在什么问题?我找不到有关该错误消息的任何信息。

我正在运行 Ubuntu 18.04.2 LTS。

$ journalctl -t canonical-livepatch
[...]
Jun 17 23:11:24 callisto canonical-livepatch[1183]: Client.Check
Jun 17 23:11:24 callisto canonical-livepatch[1183]: Checking with livepatch service.
Jun 17 23:11:24 callisto canonical-livepatch[1183]: updating last-check
Jun 17 23:11:24 callisto canonical-livepatch[1183]: touched last check
Jun 17 23:11:24 callisto canonical-livepatch[1183]: Applying update 52.3 for 4.15.0-51.55-generic
Jun 17 23:11:24 callisto canonical-livepatch[1183]: during refresh: cannot apply patches: cannot apply update: cannot execute finitModule syscall: required key not available
Jun 18 00:11:24 callisto canonical-livepatch[1183]: Client.Check
Jun 18 00:11:24 callisto canonical-livepatch[1183]: Checking with livepatch service.
Jun 18 00:11:24 callisto canonical-livepatch[1183]: updating last-check
Jun 18 00:11:24 callisto canonical-livepatch[1183]: touched last check
Jun 18 00:11:24 callisto canonical-livepatch[1183]: No updates available at this time.
Jun 18 00:11:24 callisto canonical-livepatch[1183]: Module may have caused kernel crash! Not inserting module.
Jun 18 00:11:24 callisto canonical-livepatch[1183]: To override this warning, remove /var/snap/canonical-livepatch/common/locks/livepatch_Ubuntu_4_15_0_51_55_generic_52_52.3
Jun 18 00:11:24 callisto canonical-livepatch[1183]: during refresh: cannot apply patches: lock file "/var/snap/canonical-livepatch/common/locks/livepatch_Ubuntu_4_15_0_51_55_generic_52_52.3" already exists

答案1

问题似乎是您启用了安全启动但未导入 Livepatch 密钥:https://bugs.launchpad.net/canonical-livepatch-client/+bug/1833566

你可以显然通过运行修复此问题:

sudo mokutil --import /snap/canonical-livepatch/current/keys/livepatch-kmod.x509

(您输入的密码只能使用一次)

然后,重新启动并按照说明导入密钥。

相关内容