[gentoo-dev] [PATCH 5/5]: kernel-build.eclass: require modules-sign if secureboot

[gentoo-dev] [PATCH 5/5]: kernel-build.eclass: require modules-sign if secureboot

[Andrew Ammerlaan]

 From d528f87cb015cc60ef6f702d02d20b4f1fc42e74 Mon Sep 17 00:00:00 2001
From: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
Date: Thu, 13 Jul 2023 09:55:32 +0200
Subject: [PATCH 05/13] kernel-build.eclass: require modules-sign if 
secureboot

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
---
  eclass/kernel-build.eclass | 18 +++++++++++++++++-
  1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/eclass/kernel-build.eclass b/eclass/kernel-build.eclass
index 0c8eaf3c1cd5..c9f18a1f0c4f 100644
--- a/eclass/kernel-build.eclass
+++ b/eclass/kernel-build.eclass
@@ -29,6 +29,11 @@ if [[ ! ${_KERNEL_BUILD_ECLASS} ]]; then
  _KERNEL_BUILD_ECLASS=1

  PYTHON_COMPAT=( python3_{10..12} )
+if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
+	# If we have enabled module signing IUSE
+	# then we can also enable secureboot IUSE
+	KERNEL_IUSE_SECUREBOOT=1
+fi

  inherit multiprocessing python-any-r1 savedconfig toolchain-funcs 
kernel-install

@@ -86,8 +91,19 @@ IUSE="+strip"

  if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
  	IUSE+=" modules-sign"
+	REQUIRED_USE="secureboot? ( modules-sign )"
  fi

+# @FUNCTION: kernel-build_pkg_setup
+# @DESCRIPTION:
+# Call python-any-r1 and secureboot pkg_setup
+kernel-build_pkg_setup() {
+	python-any-r1_pkg_setup
+	if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
+		secureboot_pkg_setup
+	fi
+}
+
  # @FUNCTION: kernel-build_src_configure
  # @DESCRIPTION:
  # Prepare the toolchain for building the kernel, get the default .config
@@ -395,4 +411,4 @@ kernel-build_merge_configs() {

  fi

-EXPORT_FUNCTIONS src_configure src_compile src_test src_install 
pkg_postinst
+EXPORT_FUNCTIONS src_configure src_compile src_test src_install 
pkg_postinst pkg_setup
-- 
2.41.0