gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-09-24 04:59:14 -07:00
Code Issues Projects Releases Wiki Activity

Revert "kernel-build.eclass: copy module signing key to tempdir in pkg_setup"

Browse Source 
reverted at mgorny's request, apparently we can't hardcode the portage user.

This reverts commit d03c14cd4b.

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
This commit is contained in:
Andrew Ammerlaan
2023-11-26 19:48:46 +01:00
parent b1a0b09303
commit 9f509fcc88
1 changed files with 7 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
eclass/kernel-build.eclass
View File

@@ -114,16 +114,6 @@ kernel-build_pkg_setup() {
python-any-r1_pkg_setup
if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
secureboot_pkg_setup
if [[ -e ${MODULES_SIGN_KEY} && ${MODULES_SIGN_KEY} != pkcs11:* ]]; then
if [[ -e ${MODULES_SIGN_CERT} && ${MODULES_SIGN_CERT} != ${MODULES_SIGN_KEY} ]]; then
cat "${MODULES_SIGN_CERT}" "${MODULES_SIGN_KEY}" > "${T}/kernel_key.pem" || die
else
cp "${MODULES_SIGN_KEY}" "${T}/kernel_key.pem" || die
fi
chown portage:portage "${T}/kernel_key.pem" || die
chmod 0400 "${T}/kernel_key.pem" || die
export MODULES_SIGN_KEY="${T}/kernel_key.pem"
fi
fi
}
@@ -437,6 +427,13 @@ kernel-build_merge_configs() {
CONFIG_MODULE_SIG_FORCE=y
CONFIG_MODULE_SIG_${MODULES_SIGN_HASH^^}=y
EOF
if [[ -e ${MODULES_SIGN_KEY} && -e ${MODULES_SIGN_CERT} &&
${MODULES_SIGN_KEY} != ${MODULES_SIGN_CERT} &&
${MODULES_SIGN_KEY} != pkcs11:* ]]
then
cat "${MODULES_SIGN_CERT}" "${MODULES_SIGN_KEY}" > "${T}/kernel_key.pem" || die
MODULES_SIGN_KEY="${T}/kernel_key.pem"
fi
if [[ ${MODULES_SIGN_KEY} == pkcs11:* || -r ${MODULES_SIGN_KEY} ]]; then
echo "CONFIG_MODULE_SIG_KEY=\"${MODULES_SIGN_KEY}\"" \
>> "${WORKDIR}/modules-sign.config"