From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 43D61138334 for ; Fri, 21 Sep 2018 22:58:53 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 79A0FE086A; Fri, 21 Sep 2018 22:58:49 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 26338E083D for ; Fri, 21 Sep 2018 22:58:47 +0000 (UTC) Received: from [192.168.2.102] (dslb-002-207-092-250.002.207.pools.vodafone-ip.de [2.207.92.250]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: chithanh) by smtp.gentoo.org (Postfix) with ESMTPSA id 4A79B335CCF for ; Fri, 21 Sep 2018 22:58:45 +0000 (UTC) Subject: Re: [gentoo-dev] [PATCH] eclass/linux-mod.eclass: add module signing support To: gentoo-dev@lists.gentoo.org References: <20180921051304.115704-1-gyakovlev@gentoo.org> <1537534680.1635.11.camel@tsoy.me> From: =?UTF-8?Q?Ch=c3=ad-Thanh_Christopher_Nguy=e1=bb=85n?= Openpgp: preference=signencrypt Message-ID: <63ca33b7-7663-65bc-24a9-b5f4538dbfa8@gentoo.org> Date: Sat, 22 Sep 2018 00:59:26 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.9.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <1537534680.1635.11.camel@tsoy.me> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Archives-Salt: 9dbb7c96-756a-434c-bd12-f8dda41c0223 X-Archives-Hash: 6fa763d1d2d1aae7303ee18822399800 Alexander Tsoy schrieb: >> + sign_binary_path="${KV_OUT_DIR}/scripts/sign-file" > > Yet another way to screw up modules building. It relies on some binary > in the kernel build dir that may break after openssl update (e.g. > soname change). Maybe the sign-file application could be packaged, for example as part of sys-apps/linux-misc-apps. Best regards, Chí-Thanh Christopher Nguyễn