SOLVED This was a known issue, tracked at https://bugs.gentoo.org/963425 and solved there
The latest dist kernel failed to build for me this morning. The `MODULES_SIGN_KEY` and `MODULES_SIGN_HASH` are not set in make.conf. accd' to the wiki, they should be generated. The `modules-sign` USE flag is NOT set.
Code: Select all
[I] root@ripper /e/portage# rg MODULE_SIG
savedconfig/sys-kernel/gentoo-kernel-6.12.47
920:# CONFIG_MODULE_SIG is not set
savedconfig/sys-kernel/gentoo-kernel-6.12.41
876:# CONFIG_MODULE_SIG is not set
savedconfig/sys-kernel/gentoo-kernel
874:# CONFIG_MODULE_SIG is not setCode: Select all
Could not find certificate from /usr/src/linux-6.12.47/certs/signing_key.x509
* ERROR: sys-kernel/gentoo-kernel-6.12.47::gentoo failed (postinst phase):
* Failed to convert kernel certificate to PEM format
*
* Call stack:
* ebuild.sh, line 136: Called pkg_postinst
* environment, line 2639: Called kernel-build_pkg_postinst
* environment, line 1710: Called kernel-install_pkg_postinst
* environment, line 2203: Called kernel-install_install_all '6.12.47'
* environment, line 2171: Called die
* The specific snippet of code:
* openssl x509 -inform DER -in "${kernel_cert}" -outform PEM -out "${T}/cert.pem" || die "Failed to convert kernel certificate to PEM format";
*
* If you need support, post the output of `emerge --info '=sys-kernel/gentoo-kernel-6.12.47::gentoo'`,
* the complete build log and the output of `emerge -pqv '=sys-kernel/gentoo-kernel-6.12.47::gentoo'`.
* The complete build log is located at '/var/tmp/portage/sys-kernel/gentoo-kernel-6.12.47/temp/build.log'.
* The ebuild environment file is located at '/var/tmp/portage/sys-kernel/gentoo-kernel-6.12.47/temp/environment'.
* Working directory: '/var/tmp/portage/sys-kernel/gentoo-kernel-6.12.47/empty'As well, the file /usr/src/linux-6.12.47/certs/signing_key.x509 exists, and is empty.
Code: Select all
# emerge --info '=sys-kernel/gentoo-kernel-6.12.47::gentoo'
Portage 3.0.68 (python 3.13.5-final-0, default/linux/amd64/23.0/desktop/systemd, gcc-14, glibc-2.41-r6, 6.12.41-gentoo-dist x86_64)
=================================================================
System Settings
=================================================================
System uname: Linux-6.12.41-gentoo-dist-x86_64-AMD_Ryzen_Threadripper_9960X_24-Cores-with-glibc2.41
KiB Mem: 65133512 total, 42592868 free
KiB Swap: 67108860 total, 67108860 free
Timestamp of repository gentoo: Thu, 25 Sep 2025 21:15:00 +0000
Head commit of repository gentoo: 367c032e4825b49a2f9db161f47dd642ca96f266
Head commit of repository bennypowers: 6424f3139a085bb6e0c084023677f70e946dd190
Timestamp of repository brother-overlay: Wed, 20 Aug 2025 22:36:45 +0000
Head commit of repository brother-overlay: 4148b93cb72fd0aebc7e750d36af7bee47f09c85
Timestamp of repository guru: Thu, 25 Sep 2025 17:18:34 +0000
Head commit of repository guru: 769a0b230263eb11f0cbe176d20030109dc03006
Head commit of repository jaredallard-overlay: 8186a0bf2a81034b06b66dd80f6db5d60dbd0182
Head commit of repository supertux88: 69efc9872f8dbc368269579827ccdd59ce49e7c5
sh bash 5.3_p3-r2
ld GNU ld (Gentoo 2.45 p3) 2.45.0
app-misc/pax-utils: 1.3.8::gentoo
app-shells/bash: 5.3_p3-r2::gentoo
dev-build/autoconf: 2.13-r8::gentoo, 2.72-r3::gentoo
dev-build/automake: 1.18.1::gentoo
dev-build/cmake: 3.31.8::gentoo
dev-build/libtool: 2.5.4::gentoo
dev-build/make: 4.4.1-r100::gentoo
dev-build/meson: 1.8.2::gentoo
dev-lang/perl: 5.40.2::gentoo
dev-lang/python: 3.13.5_p1::gentoo
dev-lang/rust-bin: 1.86.0-r1::gentoo, 1.89.0::gentoo
llvm-core/clang: 20.1.8::gentoo
llvm-core/lld: 20.1.8::gentoo
llvm-core/llvm: 20.1.8::gentoo
sys-apps/baselayout: 2.17::gentoo
sys-apps/sandbox: 2.46::gentoo
sys-apps/systemd: 257.9::gentoo
sys-devel/binutils: 2.45-r1::gentoo
sys-devel/binutils-config: 5.5.2::gentoo
sys-devel/gcc: 14.3.1_p20250801::gentoo
sys-devel/gcc-config: 2.12.1::gentoo
sys-kernel/linux-headers: 6.12::gentoo (virtual/os-headers)
sys-libs/glibc: 2.41-r6::gentoo
Repositories:
gentoo
location: /var/db/repos/gentoo
sync-type: rsync
sync-uri: rsync://nas.local/gentoo-portage
priority: -1000
volatile: False
sync-rsync-extra-opts:
sync-rsync-verify-metamanifest: yes
sync-rsync-verify-jobs: 1
sync-rsync-verify-max-age: 3
bennypowers
location: /var/db/repos/bennypowers
sync-type: git
sync-uri: https://github.com/bennypowers/gentoo-overlay.git
masters: gentoo
volatile: False
brother-overlay
location: /var/db/repos/brother-overlay
sync-type: git
sync-uri: https://github.com/gentoo-mirror/brother-overlay.git
masters: gentoo
volatile: False
guru
location: /var/db/repos/guru
sync-type: git
sync-uri: https://github.com/gentoo-mirror/guru.git
masters: gentoo
volatile: False
jaredallard-overlay
location: /var/db/repos/jaredallard-overlay
sync-type: git
sync-uri: https://github.com/jaredallard/overlay.git
masters: gentoo
volatile: False
supertux88
location: /var/db/repos/supertux88
sync-type: git
sync-uri: https://github.com/SuperTux88/gentoo-overlay.git
masters: gentoo
volatile: False
Binary Repositories:
gentoobinhost
priority: 1
sync-uri: https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /opt/brother/scanner/brscan4/brsanenetdevice4.cfg /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/var/cache/distfiles"
EMERGE_DEFAULT_OPTS="--jobs 24 --load-average 24"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-march=native -O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg-live config-protect-if-modified distlocks ebuild-locks export-pms-vars fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-march=native -O2 -pipe"
GENTOO_MIRRORS="https://mirror.it4i.cz/gentoo rsync://mirror.it4i.cz/gentoo rsync://ftp.fi.muni.cz/pub/linux/gentoo/ https://mirrors.dotsrc.org/gentoo/ rsync://mirrors.dotsrc.org/gentoo/ https://mirror.isoc.org.il/pub/gentoo/"
LANG="C.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
LEX="flex"
MAKEOPTS="-j48"
PKGDIR="/var/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
RUSTFLAGS=" -C target-cpu=native"
SHELL="/usr/bin/fish"
USE="X a52 aac acl acpi alsa amd64 bluetooth branding bzip2 cairo cdda cdr cet cni containers crypt cups dbus dri dts dvd dvdr encode exif flac gdbm gif gpm gtk gui iconv icu ipv6 jpeg lcms libnotify libtirpc libvirtd lto mad mng mp3 mp4 mpeg multilib ncurses networkmanager nls ogg opengl openmp pam pango pcre pdf pgo pipewire png policykit ppds qemu qml qt5 qt6 readline rocm-smi sdl seccomp sound spell ssl startup-notification svg systemd test-rust tiff truetype udev udisks unicode upower usb vorbis vulkan wayland wxwidgets x264 xattr xcb xft xml xv xvid zlib" ABI_X86="64" ADA_TARGET="gcc_14" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2 aes avx avx2 avx512_bf16 avx512_bitalg avx512_vbmi2 avx512_vnni avx512_vp2intersect avx512_vpopcntdq avx512bw avx512cd avx512dq avx512f avx512ifma avx512vbmi avx512vl avx_vnni bmi1 bmi2 f16c fma3 pclmul popcnt rdrand sha sse3 sse4_1 sse4_2 sse4a ssse3 vpclmulqdq" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GUILE_SINGLE_TARGET="3-0" GUILE_TARGETS="3-0" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LLVM_TARGETS="X86" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-3" POSTGRES_TARGETS="postgres17" PYTHON_SINGLE_TARGET="python3_13" PYTHON_TARGETS="python3_13" RUBY_TARGETS="ruby32 ruby33" VIDEO_CARDS="amdgpu fbdev intel nouveau radeon radeonsi vesa dummy" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
Unset: ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, SIZE, STRINGS, STRIP, YACC, YFLAGS
=================================================================
Package Settings
=================================================================
sys-kernel/gentoo-kernel-6.12.47::gentoo was built with the following:
USE="debug initramfs savedconfig strip -experimental -generic-uki -hardened -modules-compress -modules-sign -secureboot -test -verify-sig" ABI_X86="(64)"Code: Select all
# emerge -pqv '=sys-kernel/gentoo-kernel-6.12.47::gentoo'
[ebuild R ] sys-kernel/gentoo-kernel-6.12.47 USE="debug initramfs savedconfig strip -experimental -generic-uki -hardened -modules-compress -modules-sign -secureboot -test -verify-sig"
[ebuild U ] virtual/dist-kernel-6.12.47 [6.12.41]