“无法应用修补程序:无法应用更新:无法执行finitModule syscall:必需的密钥不可用”

Question

我已经运行了规范的livepatch，但是它显示了下面的错误消息。首先，它试图使用错误cannot apply patches: cannot apply update: cannot execute finitModule syscall: required key not available进行更新。在失败之后，它拒绝再次尝试另一次更新。

在应用更新时会有什么问题？我找不到关于那条错误信息的任何东西。

我在运行Ubuntu18.04.2LTS。

$ journalctl -t canonical-livepatch
[...]
Jun 17 23:11:24 callisto canonical-livepatch[1183]: Client.Check
Jun 17 23:11:24 callisto canonical-livepatch[1183]: Checking with livepatch service.
Jun 17 23:11:24 callisto canonical-livepatch[1183]: updating last-check
Jun 17 23:11:24 callisto canonical-livepatch[1183]: touched last check
Jun 17 23:11:24 callisto canonical-livepatch[1183]: Applying update 52.3 for 4.15.0-51.55-generic
Jun 17 23:11:24 callisto canonical-livepatch[1183]: during refresh: cannot apply patches: cannot apply update: cannot execute finitModule syscall: required key not available
Jun 18 00:11:24 callisto canonical-livepatch[1183]: Client.Check
Jun 18 00:11:24 callisto canonical-livepatch[1183]: Checking with livepatch service.
Jun 18 00:11:24 callisto canonical-livepatch[1183]: updating last-check
Jun 18 00:11:24 callisto canonical-livepatch[1183]: touched last check
Jun 18 00:11:24 callisto canonical-livepatch[1183]: No updates available at this time.
Jun 18 00:11:24 callisto canonical-livepatch[1183]: Module may have caused kernel crash! Not inserting module.
Jun 18 00:11:24 callisto canonical-livepatch[1183]: To override this warning, remove /var/snap/canonical-livepatch/common/locks/livepatch_Ubuntu_4_15_0_51_55_generic_52_52.3
Jun 18 00:11:24 callisto canonical-livepatch[1183]: during refresh: cannot apply patches: lock file "/var/snap/canonical-livepatch/common/locks/livepatch_Ubuntu_4_15_0_51_55_generic_52_52.3" already exists

Answer 1

问题似乎是启用了安全引导，并且没有导入Livepatch键：https://bugs.launchpad.net/canonical-livepatch-client/+bug/1833566

您可以通过运行显然来修复这个问题：

sudo mokutil --import /snap/canonical-livepatch/current/keys/livepatch-kmod.x509

(您输入的密码只使用一次)

然后，重新启动并按照说明导入密钥。