Arch Linux User Repository

Adding

scripts/config --disable CONFIG_IMA_ARCH_POLICY

to myconfig does solve the "Failed to insert module 'nvidia': Key was rejected by service" problem.

Anyone who configured secure boot using sbctl and want to load dkms modules can try this solution.

This package have several variables to enable/disable features.

##
## The following variables can be customized at build time. Use env or export to change at your wish
##
##   Example: env _microarchitecture=98 use_numa=n use_tracers=n makepkg -sc
##
## Look inside 'choose-gcc-optimization.sh' to choose your microarchitecture
## Valid numbers between: 0 to 99
## Default is: 0 => generic
## Good option if your package is for one machine: 98 (Intel native) or 99 (AMD native)
if [ -z ${_microarchitecture+x} ]; then
  _microarchitecture=0
fi

## Disable NUMA since most users do not have multiple processors. Breaks CUDA/NvEnc.
## Archlinux and Xanmod enable it by default.
## Set variable "use_numa" to: n to disable (possibly increase performance)
##                             y to enable  (stock default)
if [ -z ${use_numa+x} ]; then
  use_numa=y
fi

## Since upstream disabled CONFIG_STACK_TRACER (limits debugging and analyzing of the kernel)
## you can enable them setting this option. Caution, because they have an impact in performance.
## Stock Archlinux has this enabled. 
## Set variable "use_tracers" to: n to disable (possibly increase performance, XanMod default)
##                                y to enable  (Archlinux default)
if [ -z ${use_tracers+x} ]; then
  use_tracers=n
fi

# Unique compiler supported upstream is GCC
## Choose between GCC and CLANG config (default is GCC)
## Use the environment variable "_compiler=clang"
if [ "${_compiler}" = "clang" ]; then
  _compiler_flags="CC=clang HOSTCC=clang LLVM=1 LLVM_IAS=1"
fi

# Choose between the 4 main configs for stable branch. Default x86-64-v1 which use CONFIG_GENERIC_CPU2:
# Possible values: config_x86-64-v1 (default) / config_x86-64-v2 / config_x86-64-v3 / config_x86-64-v4
# This will be overwritten by selecting any option in microarchitecture script
# Source files: https://github.com/xanmod/linux/tree/5.17/CONFIGS/xanmod/gcc
if [ -z ${_config+x} ]; then
  _config=config_x86-64-v1
fi

# Compress modules with ZSTD (to save disk space)
if [ -z ${_compress_modules+x} ]; then
  _compress_modules=n
fi

# Compile ONLY used modules to VASTLY reduce the number of modules built
# and the build time.
#
# To keep track of which modules are needed for your specific system/hardware,
# give module_db script a try: https://aur.archlinux.org/packages/modprobed-db
# This PKGBUILD read the database kept if it exists
#
# More at this wiki page ---> https://wiki.archlinux.org/index.php/Modprobed-db
if [ -z ${_localmodcfg} ]; then
  _localmodcfg=n
fi

# Tweak kernel options prior to a build via nconfig
if [ -z ${_makenconfig} ]; then
  _makenconfig=n
fi

Personally I'm running now xanmod kernel compiled with this:

env _microarchitecture=98 use_tracers=n use_numa=n _localmodcfg=y _compress_modules=y makepkg -sic

Also, you can now create the file myconfig in your local repo to build this package with a custom config or use ${XDG_CONFIG_HOME}/linux-xanmod/myconfig. This file can be a full kernel config or be a script with several entries to add/remove options (you have several examples in PKGBUILD by using scripts/config):

Code involved:

  for _myconfig in "${SRCDEST}/myconfig" "${HOME}/.config/linux-xanmod/myconfig" "${XDG_CONFIG_HOME}/linux-xanmod/myconfig" ; do
    if [ -f "${_myconfig}" ] && [ "$(wc -l <"${_myconfig}")" -gt "0" ]; then
      if grep -q 'scripts/config' "${_myconfig}"; then
        # myconfig is a partial file. Executing as a script
        msg2 "Applying myconfig..."
        bash -x "${_myconfig}"
      else
        # myconfig is a full config file. Replacing default .config
        msg2 "Using user CUSTOM config..."
        cp -f "${_myconfig}" .config
      fi
      echo
      break
    fi
  done

In following code block, python should be removed because it is already in the main makedepends:

if [ "${_compiler}" = "clang" ]; then
  makedepends+=(clang llvm lld python)
fi

Also, may be worthwhile to add following to _package-headers() because dkms modules need the compiler originally used to make the kernel, but dkms depends on gcc only.

if [ "${_compiler}" = "clang" ]; then
  depends+=(clang llvm lld)
fi

Same apply to linux-xanmod-lts. They can wait until the next version bump.

I'm sorry, my stupidity, there wasn't enough disk space

@xpamych the key issues in AUR are "typical" if you build with makepkg. You need to import them as described here: https://wiki.archlinux.org/title/GnuPG#Searching_and_receiving_keys

About the issue compiling with clang: can you try with gcc and see if the problem persist?

I get an error when compiling, export _microarchitecture=99 use_numa=n use_tracers=n _compiler=clang && makepkg -sric:

LD [M]  drivers/gpu/drm/amd/amdgpu/amdgpu.o
make[6]: *** [scripts/Makefile.build:438: drivers/gpu/drm/amd/amdgpu/amdgpu.o] Ошибка 135
make[5]: *** [scripts/Makefile.build:480: drivers/gpu/drm/amd/amdgpu] Ошибка 2
make[4]: *** [scripts/Makefile.build:480: drivers/gpu/drm] Ошибка 2
make[3]: *** [scripts/Makefile.build:480: drivers/gpu] Ошибка 2
make[2]: *** [scripts/Makefile.build:480: drivers] Ошибка 2
make[1]: *** [/tmp/linux-xanmod/src/linux-6.6/Makefile:2068: .] Ошибка 2
make: *** [Makefile:234: __sub-make] Ошибка 2
==> ОШИБКА: Произошел сбой в build().
    Прерывание...
------------------

when installing from aur without parameters, there is a problem with the key

==> ВНИМАНИЕ: Пропуск проверки PGP-подписей исходных файлов.
==> Проверка файлов source с использованием sha256sums...
    linux-6.6.tar.xz ... Готово
    linux-6.6.tar.sign ... Пропущено
    patch-6.6.5-xanmod1.xz ... Готово
    choose-gcc-optimization.sh ... Готово
:: (1/1) Анализ SRCINFO: linux-xanmod
gpg: error reading key: Нет открытого ключа
pub   rsa4096 2011-09-23 [SC]
      647F28654894E3BD457199BE38DBBDC86092693E
uid         [ неизвестно ] Greg Kroah-Hartman <gregkh@linuxfoundation.org>
uid         [ неизвестно ] Greg Kroah-Hartman <gregkh@kernel.org>
uid         [ неизвестно ] Greg Kroah-Hartman (Linux kernel stable release signing key) <greg@kroah.com>
sub   rsa4096 2011-09-23 [E]


 :: Ключи PGP, требующие импорта:
 -> ABAF11C65A2970B130ABE3C479BE3E4300411886, требуется пакету: linux-xanmod
:: Импортировать? [Y/n] 
:: Импортирование ключей с помощью gpg...
gpg: сбой при получении с сервера ключей: Нет данных
 -> проблема импортирования ключей

I got it to compile, using Dracut.

@figue do you use an AMD GPU? Because I do.

@daemonspudguy yes, this, edge and binary.

That has the same error. Can you do a mkinitcpio with XanMod right now?

No, I don't. I'll try the upstream binary.

@daemonspudguy in your case, I don't identify the source of the error during mkinitcpio. Do you have any external kernel module? (nvidia, etc)

Another idea is to try the Xanmod upstream's binary package: https://aur.archlinux.org/pkgbase/linux-xanmod-linux-bin-x64v3 (if you don't need any custom configuration, of course)