Drivers & Software

[dscharalampidis]

Hello,

I've just installed the recently released RHEL 9.0 and I am running to an issue while trying to install the AMDGPU drivers.

Radeon™ Software for Linux® installer version 22.10.2 for RHEL/CentOS 9.0:

https://www.amd.com/en/support/graphics/radeon-500-series/radeon-rx-500-series/radeon-rx-570

Upon adding the repository, I am getting a warning.

warning: amdgpu-install-22.10.2.50102-1.el9.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 1a693c5c: NOKEY

Of course, without the key I am unable to install the drivers.

I tried to list the contents of the RPM. I can see a key inside it, but also the same warning:

$ rpm -qlp amdgpu-install-22.10.2.50102-1.el9.noarch.rpm
warning: amdgpu-install-22.10.2.50102-1.el9.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 1a693c5c: NOKEY
/etc/amdgpu-install
/etc/amdgpu-install/rocm.gpg.key
/etc/yum.repos.d/amdgpu.repo
/etc/yum.repos.d/rocm.repo
/usr/bin/amdgpu-install
/usr/share/amdgpu-install
/usr/share/amdgpu-install/AMDGPUPROEULA

Can anybody help with this?

Many thanks in advance.

[dscharalampidis]

After installing the RPM graphically and trying to install the drivers, the included key is imported successfully, but some packages fail to open with this key.

AMDGPU 22.10.2 repository                                                                          3.0 MB/s | 3.0 kB     00:00    
Importing GPG key 0x1A693C5C:
 Userid     : "AMD MLSE DevOps <dl.MLSE.DevOps@amd.com>"
 Fingerprint: CA8B B472 7A47 B4D0 9B4E E896 9386 B48A 1A69 3C5C
 From       : /etc/amdgpu-install/rocm.gpg.key
Is this ok [y/N]: y
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
Problem opening package amdgpu-22.10.2.50102-1411481.el9.x86_64.rpm. Failing package is: amdgpu-22.10.2.50102-1411481.el9.x86_64
 GPG Keys are configured as: file:///etc/amdgpu-install/rocm.gpg.key
Problem opening package amdgpu-core-22.10.2.50102-1411481.el9.noarch.rpm
Problem opening package amdgpu-dkms-5.13.20.22.10.50102-1411481.el9.noarch.rpm
Problem opening package amdgpu-dkms-firmware-5.13.20.22.10.50102-1411481.el9.noarch.rpm
Problem opening package amdgpu-lib-22.10.2.50102-1411481.el9.x86_64.rpm
Problem opening package dkms-3.0.3-1.el9.noarch.rpm
Problem opening package libdrm-amdgpu-2.4.109.50102-1411481.el9.x86_64.rpm
Problem opening package libdrm-amdgpu-common-1.0.0.50102-1416322.el9.noarch.rpm
Problem opening package libwayland-amdgpu-client-1.19.0.50102-1411481.el9.x86_64.rpm
Problem opening package libwayland-amdgpu-egl-1.19.0.50102-1411481.el9.x86_64.rpm
Problem opening package libwayland-amdgpu-server-1.19.0.50102-1411481.el9.x86_64.rpm
Problem opening package llvm-amdgpu-libs-13.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-dri-drivers-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-filesystem-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-libEGL-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-libGL-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-libgbm-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-libglapi-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-libxatracker-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package mesa-amdgpu-vdpau-drivers-22.0.0.50102-1411481.el9.x86_64.rpm
Problem opening package xorg-x11-amdgpu-drv-amdgpu-24.1.0-1411481.el9.x86_64.rpm
Problem opening package amdgpu-pro-22.10.2-1411481.el9.x86_64.rpm
Problem opening package amdgpu-pro-core-22.10.2-1411481.el9.noarch.rpm
Problem opening package libegl-amdgpu-pro-22.10.2-1411481.el9.x86_64.rpm
Problem opening package libgl-amdgpu-pro-22.10.2-1411481.el9.x86_64.rpm
Problem opening package libgl-amdgpu-pro-appprofiles-22.10.2-1411481.el9.noarch.rpm
Problem opening package libgl-amdgpu-pro-dri-22.10.2-1411481.el9.x86_64.rpm
Problem opening package libgl-amdgpu-pro-ext-22.10.2-1411481.el9.x86_64.rpm
Problem opening package libglapi-amdgpu-pro-22.10.2-1411481.el9.x86_64.rpm
Problem opening package libgles-amdgpu-pro-22.10.2-1411481.el9.x86_64.rpm
Problem opening package vulkan-amdgpu-pro-22.10.2-1411481.el9.x86_64.rpm
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'yum clean packages'.
Error: GPG check FAILED

[dscharalampidis]

I  tried to install the RPMs with --nosignature, but dmks fails:

Building for 5.14.0-70.13.1.el9_0.x86_64
Building initial module for 5.14.0-70.13.1.el9_0.x86_64
Error! Bad return status for module build on kernel: 5.14.0-70.13.1.el9_0.x86_64 (x86_64)
Consult /var/lib/dkms/amdgpu/5.13.20.22.10-1411481.el9/build/make.log for more information.
warning: %post(amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch) scriptlet failed, exit status 10

[JoshuaPK · Accepted solution]

Here's the problem, it took me a long while to figure this out.  You need to do the following:

update-crypto-policies --set DEFAULT:SHA1

The problem is that RHEL9 (and its derivatives) disable SHA1 by default because it is insecure.  Whever does the packaging for the AMD drivers needs to update the algorithm on their signatures.

[dscharalampidis]

That's a great find @JoshuaPK

I am gonna mark your post as a solution as it solves the NOKEY issue.
However, the amdgpu-dkms still fails to install correctly:

Running transaction
  Preparing        :                                                                                                           1/1 
  Reinstalling     : amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      1/2 
  Running scriptlet: amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      1/2 
Loading new amdgpu-5.13.20.22.10-1411481.el9 DKMS files...
Building for 5.14.0-70.17.1.el9_0.x86_64
Building initial module for 5.14.0-70.17.1.el9_0.x86_64
Error! Bad return status for module build on kernel: 5.14.0-70.17.1.el9_0.x86_64 (x86_64)
Consult /var/lib/dkms/amdgpu/5.13.20.22.10-1411481.el9/build/make.log for more information.
warning: %post(amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch) scriptlet failed, exit status 10

Error in POSTIN scriptlet in rpm package amdgpu-dkms
  Running scriptlet: amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      2/2 
Deleting module amdgpu-5.13.20.22.10-1411481.el9 completely from the DKMS tree.

  Cleanup          : amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      2/2 
  Running scriptlet: amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      2/2 
/var/tmp/rpm-tmp.byHUaL: line 3: /var/tmp/amdgpu-dkms-kernels: No such file or directory

  Verifying        : amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      1/2 
  Verifying        : amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                      2/2 
Installed products updated.

Reinstalled:
  amdgpu-dkms-1:5.13.20.22.10.50102-1411481.el9.noarch                                                                             

Complete!

Despite that, the drivers seem to work.

I am posting this article on policy management here for those who want to understand what your terminal command does: https://www.redhat.com/en/blog/how-customize-crypto-policies-rhel-82