Gentoo Archives: gentoo-dev

From: Kenton Groombridge <concord@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH] linux-mod.eclass: support module signing
Date: Mon, 27 Jun 2022 20:03:10
Message-Id: 20220627200255.bsikofgbnpc4lgjp@fuuko
In Reply to: Re: [gentoo-dev] [PATCH] linux-mod.eclass: support module signing by Georgy Yakovlev
1 > > Why can't we do both in pkg_preinst? I am thinking it would be best
2 > > if
3 > > we drop the current compression implementation and rework your old
4 > > code
5 > > to handle both compression and signing since the signing code is more
6 > > or
7 > > less already complete.
8 >
9 > i'm not sure if sign-file can sign compressed modules.
10
11 sign-file will not error when signing a compressed module, but the
12 kernel will not be able to load it.
13
14 > if we let kernel build handle compression - we have to sign prior to
15 > compression.
16 > if we compress modules ourselves then yes, we could sign first indeed.
17 >
18 > but preinst has it's own issues, you've already seen floppym's remark.
19 >

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] [PATCH] linux-mod.eclass: support module signing Georgy Yakovlev <gyakovlev@g.o>