Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #237534 > unrolled thread

Wireguard and my Buster kernel

Back to article view | Back to linux.debian.user

Contents

  Wireguard and my Buster kernel Bob Bernstein <poobah@ruptured-duck.com> - 2021-07-20 10:00 +0200
    Re: Wireguard and my Buster kernel Reco <recoverym4n@enotuniq.net> - 2021-07-20 11:10 +0200
      Re: Wireguard and my Buster kernel Bob Bernstein <poobah@ruptured-duck.com> - 2021-07-20 18:30 +0200
    Re: Wireguard and my Buster kernel Dan Ritter <dsr@randomstring.org> - 2021-07-20 12:40 +0200

#237534 — Wireguard and my Buster kernel

/var/log/kern.log contains these lines:

Jul 19 09:15:38 debian kernel: [69157.444725] wireguard: module 
verification failed: signature and/or required key missing - 
tainting kernel
Jul 19 09:15:38 debian kernel: [69157.449554] wireguard: 
WireGuard 1.0.20200712 loaded. See www.wireguard.com for 
information.
Jul 19 09:15:38 debian kernel: [69157.449555] wireguard: 
Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. 
All Rights Reserved.

This is an old HP amd64 running as noted:

$ uname -a
Linux debian.localdomain 4.19.0-14-amd64 #1 SMP Debian 
4.19.171-2 (2021-01-30) x86_64 GNU/Linux

Principal symptom: pervasive slowdown of all connections to 
remote hosts, notice first with my smtp smart host.

I am resigned to reinstalling my VPN, which will bring the 
latest Wireguard with it iirc, but are those kern.log lines 
consistent with my complaint/report of slowness?

Thank you,

-- 
...a society must incorporate the rationalizing
power symbolized by scientific knowledge, for
otherwise it will be a fatally split society-
split between a powerful elite and the
disenfranchised mass. To this we add now: an
irrational elite is the most dangerous of all.

Holton, Gerald. 1985. On the Integrity of
Science: The Issues Since Bronowski. Leonardo
18 (4), Special Issue: Jacob Bronowski: A
Retrospective (1985): 229-232.

[toc] | [next] | [standalone]

#237537

	Hi.

On Tue, Jul 20, 2021 at 03:46:48AM -0400, Bob Bernstein wrote:
> /var/log/kern.log contains these lines:
> 
> Jul 19 09:15:38 debian kernel: [69157.444725] wireguard: module verification failed: signature and/or required key missing - tainting kernel

It's an out-of-tree module, so this is expected.
Moreover, it tells you that it's a self-built unsigned module, which is
expected if you happen to use dkms.


> Principal symptom: pervasive slowdown of all connections to remote
> hosts, notice first with my smtp smart host.

It has nothing to do with the kernel module status.
I'd blame your ISP first, and the code quality of kernel module second.

I.e. if you're seeing large amounts of CPU eaten by the kernel - the
kernel module is likely the problem (although it needs to be verified by
perf top). If not - you'll just waste your time upgrading to next
version of wireguard.

Reco

[toc] | [prev] | [next] | [standalone]

#237551

On Tue, 20 Jul 2021, Reco wrote:

> It has nothing to do with the kernel module status. I'd blame 
> your ISP first, and the code quality of kernel module second.

I don't have any intuitive "feel" for kernel processes i.e. I am 
unable to discern or even form a small hunch that a given effect 
I am witnessing has its source in events in the kernel. I 
suppose there are some who do!

> If not - you'll just waste your time upgrading to next version 
> of wireguard.

I did the upgrade; my VPN vendor prefers us to use the latest. 
But I see no change in behaviour.

Oh well, I guess that's just life in the Big Leagues; they don't 
call it hard ball for nothing.

9-)

Thank you all.


-- 
...a society must incorporate the rationalizing
power symbolized by scientific knowledge, for
otherwise it will be a fatally split society-
split between a powerful elite and the
disenfranchised mass. To this we add now: an
irrational elite is the most dangerous of all.

Holton, Gerald. 1985. On the Integrity of
Science: The Issues Since Bronowski. Leonardo
18 (4), Special Issue: Jacob Bronowski: A
Retrospective (1985): 229-232.

[toc] | [prev] | [next] | [standalone]

#237540

Bob Bernstein wrote: 
> /var/log/kern.log contains these lines:
> 
> Jul 19 09:15:38 debian kernel: [69157.444725] wireguard: module verification
> failed: signature and/or required key missing - tainting kernel
> Jul 19 09:15:38 debian kernel: [69157.449554] wireguard: WireGuard
> 1.0.20200712 loaded. See www.wireguard.com for information.
> Jul 19 09:15:38 debian kernel: [69157.449555] wireguard: Copyright (C)
> 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
> 
> This is an old HP amd64 running as noted:
> 
> $ uname -a
> Linux debian.localdomain 4.19.0-14-amd64 #1 SMP Debian 4.19.171-2
> (2021-01-30) x86_64 GNU/Linux
> 
> Principal symptom: pervasive slowdown of all connections to remote hosts,
> notice first with my smtp smart host.
> 
> I am resigned to reinstalling my VPN, which will bring the latest Wireguard
> with it iirc, but are those kern.log lines consistent with my
> complaint/report of slowness?

Probably not. We have Wireguard installed on a hundred or so
machines, including roving laptops, and there are no issues like
that. 

Note that Wireguard will be part of the default kernel when
Bullseye becomes stable in a month or so, or if you get a
backports kernel now.

-dsr-

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web