I have read on this forum that the vboxdrv kernel module needs to be signed. Otherwise my Ubuntu 16.04 LTS with UEFI secure boot will not allow vboxdrv to get installed:
Code: Select all
$ sudo modprobe -v vboxdrv
insmod /lib/modules/4.4.0-57-generic/misc/vboxdrv.ko
modprobe: ERROR: could not insert 'vboxdrv': Required key not available
The author of that post gives instructions for how to create a key pair and sign it, etc. I think that is quite complex and before going that route I wanted to point out that the installation instructions for VirtualBox 5.1.12 here (www(dot)virtualbox(dot)org(slash)wiki(slash)Linux_Downloads) provide a public key from Oracle. There are also instructions for how to download it and add it with apt-key. I can see the keys with apt-key list:
Code: Select all
pub 4096R/2980AECF 2016-04-22
uid Oracle Corporation (VirtualBox archive signing key) <info@virtualbox(dot)org>
sub 4096R/920E471F 2016-04-22
pub 1024D/98AB5139 2010-05-18
uid Oracle Corporation (VirtualBox archive signing key) <info@virtualbox(dot)org>
sub 2048g/281DDC4B 2010-05-18
My question is do I really have to manually sign the kernel module or is there an installation step that is missing from the instructions that can explain why the Oracle public key is being provided and how to use it. My thought is that the kernel module might already be signed by Oracle and can be trusted. Do I really need to manually sign the kernel module?