| View previous topic :: View next topic |
| Author |
Message |
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
 Posted: Tue May 28, 2024 11:22 pm Post subject: Gentoo Kernel build failed, No rule to make target |
 |
|
Hello everyone, Yesterday I started to do a new installation of gentoo with KDE Plasma + Gentoo Kernel manually compiled without Genkernel With SecureBoot, but when I try to compile sys-kernel/gentoo-kernel with make -j32 it fails.
I tried to pass information with make -j32 >> build.log but what was shown on the screen did not pass to the build.log. Even so, I was able to upload the information to Pastebin because I am in the middle of installing XUbuntu doing chroot (it is signed to boot with SecureBoot enabled) and I also want to do the functional installation with secureboot and with Shim.
Here is the problem:
| Code: |
GEN arch/x86/include/generated/asm/orc_hash.h
make[2]: *** No rule to make target 'arch/x86/entry/syscalls/syscall_32.tbl', needed by 'arch/x86/include/generated/uapi/asm/unistd_32.h'. Stop.
make[1]: *** [arch/x86/Makefile:248: archheaders] Error 2
make[1]: *** Waiting for unfinished jobs....
HOSTCC scripts/basic/fixdep
make: *** [Makefile:234: __sub-make] Error 2
|
I hope it can be solved, also after solving it I want to sign the kernel as I said before
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
 |
xgivolari
Tux's lil' helper
Joined: 26 Jul 2021
Posts: 102
|
| Posted: Wed May 29, 2024 10:01 am Post subject: |
|
|
| Are you invoking make directly inside the source directory? gentoo-kernel is not supposed to be compiled like that. That method is meant for sys-kernel/*-sources. gentoo-kernel gets built via portage when you emerge it, just like any other source-based package. Check out the Kernel wiki page for more info. |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Wed May 29, 2024 1:32 pm Post subject: |
|
|
As the previous poster already clarified, gentoo-kernel has already been built and installed by portage, make is not required. If you have enabled USE=secureboot, it is also already signed for you with the keys specified in make.conf.
You are far from the first person to try to 'make' a distribution kernel. Could you let us know which instructions made you try this so we can clarify the documentation?
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Wed May 29, 2024 7:00 pm Post subject: |
|
|
I didn't know that, I think I confused the gentoo-source installation method with the gentoo-kernel.
I still want to configure the kernel, I use make menuconfig for that and what do I do with the .config? Also, after that I want to check that the secureboot thing is correct. I made the .pem with what was specified in the installation guide: https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Kernel
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Wed May 29, 2024 7:03 pm Post subject: |
|
|
I also concentrated on signing the kernel, so that it is not blocked.
I won't reboot yet, I still need to finish the chroot installation
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Wed May 29, 2024 7:57 pm Post subject: |
|
|
To switch to the manual method, while keeping your config:
emerge gentoo-sources
cp /usr/src/linux-x.y.z-gentoo-dist/.config /usr/src/linux-x.y.z-gentoo/.config
emerge --depclean gentoo-kernel
And proceed with the steps as described in the handbook.
Note that for secureboot to be effictive you'll want to enable several config options to ensure that the verified kernel stays in a verified state. This is done automatically by gentoo-kernel when the secureboot flag is enabled. I'm actually not sure this is documented anywhere, but you can find the config snippet we apply here: https://github.com/projg2/gentoo-kernel-config/blob/master/secureboot.config
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Wed May 29, 2024 8:11 pm Post subject: |
|
|
I planned this installation to be with gentoo-kernel instead of gentoo-sources, because it is tiring for me to update gentoo-source and have to reconfigure the entire .config, and if I don't want to update constantly, there are several kernels in /usr/src and I don't want /usr to be filled, so I want to be able to configure gentoo-kernel with the configurations of my preference and have the old kernels removed instead of filling /usr
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Thu May 30, 2024 9:53 am Post subject: |
|
|
| ian848uig wrote: | | I planned this installation to be with gentoo-kernel instead of gentoo-sources, because it is tiring for me to update gentoo-source and have to reconfigure the entire .config, and if I don't want to update constantly, there are several kernels in /usr/src and I don't want /usr to be filled, so I want to be able to configure gentoo-kernel with the configurations of my preference and have the old kernels removed instead of filling /usr |
You can customize the used config in two ways as described here: https://wiki.gentoo.org/wiki/Project:Distribution_Kernel#Modifying_kernel_configuration
If you use the savedconfig method you can simply copy your existing config into the savedcondig directory, but you'll have to update this config manually when the kernel updates. I therefore recommend using the /etc/kernel/config.d method instead to enable/disable only those options where your config deviates from the default.
Since you mentioned you want to boot with secureboot enabled, please also ensure that the "secureboot" and "modules-sign" flags are globally enabled and that SECUREBOOT_SIGN_KEY/SECUREBOOT_SIGN_CERT and MODULES_SIGN_KEY/MODULES_SIGN_CERT are set in make.conf to the keys you wish to use.
Kernel clean-up is handled by app-admin/eclean-kernel.
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Thu May 30, 2024 11:45 pm Post subject: |
|
|
Now I'm trying to make GRUB valid so that SecureBoot doesn't block it during boot.
But thanks for the suggestion
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Fri May 31, 2024 11:09 pm Post subject: |
|
|
In the end, even if I signed grubx64.efi, it always showed "Secure Boot Violation" and I used the .pem that I generated with OpenSSL.
For now I deactivated it, I will try again later.
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Sat Jun 01, 2024 7:20 am Post subject: |
|
|
| ian848uig wrote: | In the end, even if I signed grubx64.efi, it always showed "Secure Boot Violation" and I used the .pem that I generated with OpenSSL.
For now I deactivated it, I will try again later. |
Two things you can try to verify that everything was done correctly:
- 'mokutil --list-enrolled' Does it list your key as enrolled in the MOK list?
- 'efibootmgr -u' does it show shimx64.efi as the first bootloader for your system?
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Sun Jun 02, 2024 3:25 am Post subject: |
|
|
First of all mokutil doesn't show anything in the terminal, and efibootmgr shows \EFI\Gentoo\grubx64.efi.
also the shimx64.efi is not there.
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Sun Jun 02, 2024 9:30 am Post subject: |
|
|
Well that explains why it doesn't work. To fix the problem:
- Copy shimx64.efi and mmx64.efi (from sys-boot/shim) into \EFI\Gentoo
- Create a new entry for shimx64.efi with efibootmgr
- mokutil --import <your der format key here>
- reboot and complete import process
- enable secure boot
The procedure is described in more detail in the bootloader section of the handbook
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Sun Jun 02, 2024 4:30 pm Post subject: |
|
|
I find that in /usr/share/shim there is no shimx64.efi nor its variants for the other architectures, but there are BOOTX64.EFI, BOOTIA32.EFI, mmia32.efi and mmx64.efi
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Sun Jun 02, 2024 5:22 pm Post subject: |
|
|
| ian848uig wrote: | | I find that in /usr/share/shim there is no shimx64.efi nor its variants for the other architectures, but there are BOOTX64.EFI, BOOTIA32.EFI, mmia32.efi and mmx64.efi |
BOOTX64.EFI is shim and mmx64.efi is MokManager. Both should be copied to \EFI\Gentoo, where you can rename shim to shimx64.efi (name doesn't really matter, but it is useful to name it shim so it is clear what it is.
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Sun Jun 02, 2024 5:46 pm Post subject: |
|
|
Well, the official gentoo shim wiki doesn't name this what it tells me.
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
ian848uig
n00b
Joined: 21 Sep 2023
Posts: 42
Location: Latin America
|
| Posted: Mon Jun 03, 2024 10:12 pm Post subject: |
|
|
I tried, but when I import the .der and restart and activate SecureBoot, shim semi-crashes GRUB showing the following message:
| Code: |
error: prohibited by secure boot policy
|
I can only use the ls command, and GRUB shows up in GRUB Rescue
_________________
I like everything that is Linux, free and open source software. I am a teenager |
|
| Back to top |
|
|
Nowa
Developer
Joined: 25 Jun 2014
Posts: 429
Location: Nijmegen
|
| Posted: Tue Jun 04, 2024 6:17 am Post subject: |
|
|
GRUB is a modular bootloader, but it is not allowed to load modules when secure boot is enabled. Have you compiled all the modules you need into the grub efi executable so it does not have to load them at runtime? The procedure is described here: https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Bootloader#Optional:_Secure_Boot
When using secure boot it is a lot easier to use systemd-boot or rEFInd, both packages implement the secureboot use flag so the bootloader will be signed automatically and there is no need to worry about modules. The procedure to boot both via shim is described on the respective wiki's.
_________________
OS: Gentoo 6.10.12-gentoo-dist, ~amd64, 23.0/desktop/plasma/systemd
MB: MSI Z370-A PRO
CPU: Intel Core i9-9900KS
GPU: Intel Arc A770 16GB & Intel UHD Graphics 630
SSD: Samsung 970 EVO Plus 2 TB
RAM: Crucial Ballistix 32GB DDR4-2400 |
|
| Back to top |
|
|
|
Installing Gentoo
