The article explains the meaning of the below log message.
Jun 5 02:31:37 jtac-qfx5200-lab kernel: %KERN-3: veriexec: no signatures for device. file='./tftp_deploy.csh' fsid=2264989443 fileid=12 gen=3926806262 uid=0 pid=38604
This log messages is in <show log messages>
Verified Exec (also known as veriexec) is a file-signing and verification scheme that protects the Junos operating system (OS) against unauthorized software and activity that might compromise the integrity of your device. The veriexec loader feeds the contents of the manifest to the kernel only if the digital signature of the manifest is successfully verified. The kernel can then verify if a file matches its fingerprint. If veriexec is being enforced, only executables with a verified fingerprint will run.
The below log message gets reported when the veriexec checked the file in file location however it couldn't execute it successfully. This could be because the file that is being checked does not have a signature in the manifest or the file is corrupted.
When the above log message is reported, check the contents of the file being accessed by veriexec scheme and its authenticity. The log message is an informational log message and doesn't have any operational impact.
2023-06-08 : Initial publication2024-07-29 - Visibility modified