kernel-install.eclass: support test of bin kernel with signed modules

The gentoo-kernel-bin does not have IUSE=modules-sign, but it does
have signed modules if it was built with KERNEL_IUSE_MODULES_SIGN.
Enforce signature verification in the test phase for this case.

Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org>
This commit is contained in:
Nowa Ammerlaan
2025-07-20 20:08:26 +02:00
parent 1b91c38569
commit c1992bfafe

View File

@@ -478,7 +478,11 @@ kernel-install_test() {
esac
if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
use modules-sign && qemu_extra_append+=" module.sig_enforce=1"
# If KERNEL_IUSE_MODULES_SIGN, but no IUSE=modules-sign,
# then this is gentoo-kernel-bin test phase with signed mods.
if ! in_iuse modules-sign || use modules-sign; then
qemu_extra_append+=" module.sig_enforce=1"
fi
fi
cat > run.sh <<-EOF || die