Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-107178

systemtap: stap --dyninst does not work out of the box if Secure Boot is enabled

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-9.6.z
    • systemtap
    • None
    • No
    • Low
    • rhel-pt-perf-tools
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • Red Hat Enterprise Linux
    • None
    • None
    • None
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Not Required
    • Unspecified
    • None

      Based on my understanding, dyninst mode should work in userspace, even as non-root. However, trying to run it on 9.6, I get:

      $ stap --dyninst -e 'probe process("/usr/bin/true").function("main") {rintln(pn())}' -c /usr/bin/true
      Using a compile server.
      Failed to create Avahi client: Daemon not running
      Unable to find a suitable compile server.  [man stap-server]
      No servers online to select from.
      Passes: via server failed.  Try again with another '-v' option.
      The kernel on your system requires modules to be signed for loading.
      The module created by compiling your script must be signed by a systemtap compile-server.  [man stap-server]
      --use-server was automatically selected in order to request compilation by a compile-server.
      

      Seen with systemtap-5.2-2.el9.x86_64, kernel-5.14.0-570.30.1.el9_6.x86_64, mokutil-0.6.0-4.el9.x86_64. The system is a default installation (bare metal) with Secure Boot enabled.

              rhtorsys Frank Eigler
              fweimer@redhat.com Florian Weimer
              Frank Eigler Frank Eigler
              Martin Cermak Martin Cermak
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: