From c1992bfafece7b495785d4838a2d5ccb19a80b71 Mon Sep 17 00:00:00 2001 From: Nowa Ammerlaan Date: Sun, 20 Jul 2025 20:08:26 +0200 Subject: [PATCH] kernel-install.eclass: support test of bin kernel with signed modules The gentoo-kernel-bin does not have IUSE=modules-sign, but it does have signed modules if it was built with KERNEL_IUSE_MODULES_SIGN. Enforce signature verification in the test phase for this case. Signed-off-by: Nowa Ammerlaan --- eclass/kernel-install.eclass | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass index 67143278f3680..e753592c46fce 100644 --- a/eclass/kernel-install.eclass +++ b/eclass/kernel-install.eclass @@ -478,7 +478,11 @@ kernel-install_test() { esac if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then - use modules-sign && qemu_extra_append+=" module.sig_enforce=1" + # If KERNEL_IUSE_MODULES_SIGN, but no IUSE=modules-sign, + # then this is gentoo-kernel-bin test phase with signed mods. + if ! in_iuse modules-sign || use modules-sign; then + qemu_extra_append+=" module.sig_enforce=1" + fi fi cat > run.sh <<-EOF || die