Since I have secure boot on Ubuntu 16.04 enabled, I need to sign vboxdrv.
I create signing keys using:
openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -days 36500 -subj "/CN=Descriptive name/"
Then I sign the module:
sudo /usr/src/linux-headers-$(uname -r)/scripts/sign-file sha256 ./MOK.priv ./MOK.der $(modinfo -n vboxdrv)
However, when I call:
modinfo vboxdrv
The module is not confirmed to be signed:
$ modinfo vboxdrv filename: /lib/modules/4.4.0-22-generic/updates/dkms/vboxdrv.ko version: 5.0.18_Ubuntu (0x00240000) license: GPL description: Oracle VM VirtualBox Support Driver author: Oracle Corporation srcversion: 316C2AE8082B5DFBAABE7EA depends:
vermagic: 4.4.0-22-generic SMP mod_unload modversions parm: force_async_tsc:force the asynchronous TSC mode (int)
I then run:
sudo mokutil --import MOK.der
And reboot, which prompts me to import a machine owner key. However, this fails (invalid parameter (2)). I think its due to the module not being signed earlier, as ruing modinfo vboxdrv should confirm that the module was signed.
Any advice welcome and highly appreciated.