1 |
> > Why can't we do both in pkg_preinst? I am thinking it would be best |
2 |
> > if |
3 |
> > we drop the current compression implementation and rework your old |
4 |
> > code |
5 |
> > to handle both compression and signing since the signing code is more |
6 |
> > or |
7 |
> > less already complete. |
8 |
> |
9 |
> i'm not sure if sign-file can sign compressed modules. |
10 |
|
11 |
sign-file will not error when signing a compressed module, but the |
12 |
kernel will not be able to load it. |
13 |
|
14 |
> if we let kernel build handle compression - we have to sign prior to |
15 |
> compression. |
16 |
> if we compress modules ourselves then yes, we could sign first indeed. |
17 |
> |
18 |
> but preinst has it's own issues, you've already seen floppym's remark. |
19 |
> |