gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-09-24 04:59:14 -07:00
Code Issues Projects Releases Wiki Activity

sys-kernel/gentoo-kernel-bin: set the secureboot cert in 6.12.{47,48}

Browse Source 
Looks like I missed these two earlier

Closes: https://bugs.gentoo.org/963360
Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org>
This commit is contained in:
Nowa Ammerlaan
2025-09-24 15:13:36 +02:00
parent e17ad6862b
commit c8a9bb6828
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.47.ebuild
View File

@@ -155,6 +155,13 @@ src_configure() {
die "USE=generic-uki requires a CONFIG_EFI_ZBOOT enabled build"
fi
# Override user variable with the cert used during build
openssl x509 \
-inform DER -in "${kernel_dir}/certs/signing_key.x509" \
-outform PEM -out "${T}/cert.pem" ||
die "Failed to convert pcrpkey to PEM format"
export SECUREBOOT_SIGN_CERT=${T}/cert.pem
local image="${kernel_dir}/$(dist-kernel_get_image_path)"
local uki="${image%/*}/uki.efi"
if [[ -s ${uki} ]]; then

7
sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.48.ebuild
View File

@@ -155,6 +155,13 @@ src_configure() {
die "USE=generic-uki requires a CONFIG_EFI_ZBOOT enabled build"
fi
# Override user variable with the cert used during build
openssl x509 \
-inform DER -in "${kernel_dir}/certs/signing_key.x509" \
-outform PEM -out "${T}/cert.pem" ||
die "Failed to convert pcrpkey to PEM format"
export SECUREBOOT_SIGN_CERT=${T}/cert.pem
local image="${kernel_dir}/$(dist-kernel_get_image_path)"
local uki="${image%/*}/uki.efi"
if [[ -s ${uki} ]]; then