-
-
Notifications
You must be signed in to change notification settings - Fork 15
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Waydroid/binder module not working #112
Comments
This might be a similar issue, I'm facing although I don't have logs Vanilla-OS/desktop-image#111 |
Make sure that you have secure boot disabled, the module cannot be loaded if it is enabled. |
I pushed a fix that checks if secure boot is enabled and then raise the proper error. Let me know if the problem persist once the fix is distributed. Feel free to re-open. |
I don't think it has anything to do with secure boot, it's a feature of Intel IBT on 11th gen and later processors. You need to compile the waydroid module with different flags iirc. You can disable IBT via the kernel command line, but that weakens security and isn't a solution. |
I've applied the fix proposed by @TaeHagen in |
@TaeHagen, I assume it works for you when disabling IBT, right? |
Honestly haven't tried, based on the error I assumed that would fix it. |
It would be helpful if you could verify, so that we can know for sure. |
The proposed fix is included in the new update. |
I updated to the latest beta version, still getting same error. Is the fix included in the latest build? How do I know I have the fix? |
Hi, are you in a VM in your installation using the |
No, I'm using raw standard hardware (non-nvidia) |
What's the result of |
ABRoot Partitions: Loaded Configuration: /etc/abroot/abroot.json Device Specifications: ABImage: Kernel Arguments: %s quiet splash bgrt_disable $vt_handoff Packages: Package agreement: true |
Hi, I am pretty sure this issue is no longer present, I tested Waydroid implementation a few days ago with Secure boot disabled on Intel hardware and it works fine, can you try checking it again? |
Sorry, I think there's been a misunderstanding. This issue has nothing to do with secure boot. It affects 11th gen and higher intel chips, regardless of whether secure boot is enabled or not. It is a problem with indirect branch tracking. It has nothing to do with secure boot. IBT can be disabled with a kernel command line argument, but that reduces security. Thank you! |
Issue Description
I can't use Waydroid at all, setup fails complaining
/dev/binderfs/binder-control
doesn't exist.Steps to Reproduce
As far as I can tell, it is caused by using Orchid with IBT enabled (11th gen intel or newer)
On what version of Vanilla OS this happens?
Unreleased
Additional Information
Attempting to mount
/dev/binderfs
mount crashes with a segfault, dmesg shows a missingendbr
instruction. This is a security feature being triggered caused by the binder module not being compiled with the right options, see https://lwn.net/Articles/889475/At a glance, it would appear the module should be compiled with
-fcf-protection=branch
, but i'm not sure how that needs to happen, nor if it's anbox's issue or an issue with dkms.The text was updated successfully, but these errors were encountered: