Re: [gentoo-dev] [PATCH] eclass/linux-mod.eclass: add module signing support

[Georgy Yakovlev <gyakovlev@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1001 bytes --]

On Friday, September 21, 2018 3:59:26 PM PDT Chí-Thanh Christopher Nguyễn 
wrote:
> Alexander Tsoy schrieb:
> >> +	sign_binary_path="${KV_OUT_DIR}/scripts/sign-file"
> > 
> > Yet another way to screw up modules building. It relies on some binary
> > in the kernel build dir that may break after openssl update (e.g.
> > soname change).
> 
> Maybe the sign-file application could be packaged, for example as part of
> sys-apps/linux-misc-apps.
> 
> 
> Best regards,
> Chí-Thanh Christopher Nguyễn

linux-mod.eclass already relies on full kernel build dir to be available to 
build modules.

and depending on another ebuild means that it has to be keyworded on different 
arches to actually support signing on those arches.

simple kbuild approach is better IMO, if a system can build a kernel and 
modules means it can sign it.
Maintaining separate package, especially with kernel update pace will be a 
nightmare.

-- 
Regads,
Georgy Yakovlev
Gentoo Linux Developer

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]