mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-09-23 16:49:10 -07:00
kernel-install.eclass: support test of bin kernel with signed modules
The gentoo-kernel-bin does not have IUSE=modules-sign, but it does have signed modules if it was built with KERNEL_IUSE_MODULES_SIGN. Enforce signature verification in the test phase for this case. Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org>
This commit is contained in:
@@ -478,7 +478,11 @@ kernel-install_test() {
|
||||
esac
|
||||
|
||||
if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
|
||||
use modules-sign && qemu_extra_append+=" module.sig_enforce=1"
|
||||
# If KERNEL_IUSE_MODULES_SIGN, but no IUSE=modules-sign,
|
||||
# then this is gentoo-kernel-bin test phase with signed mods.
|
||||
if ! in_iuse modules-sign || use modules-sign; then
|
||||
qemu_extra_append+=" module.sig_enforce=1"
|
||||
fi
|
||||
fi
|
||||
|
||||
cat > run.sh <<-EOF || die
|
||||
|
||||
Reference in New Issue
Block a user