Home Home > GIT Browse > packaging
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGuillaume GARDET <guillaume.gardet@free.fr>2019-05-09 10:50:34 +0200
committerMichal Suchanek <msuchanek@suse.de>2019-05-09 11:26:55 +0200
commitbac621c6704610562ebd9e74ae5ad85ca8025681 (patch)
tree2bf438dc76de3b4793da69d25dfb17d172abce6a
parent0e54e61a47a4187e94ce4edb5003cdda52be865f (diff)
Sign non-x86 kernels when possible (boo#1134303)
Signed-off-by: Guillaume GARDET <guillaume.gardet@free.fr>
-rw-r--r--rpm/kernel-binary.spec.in30
1 files changed, 15 insertions, 15 deletions
diff --git a/rpm/kernel-binary.spec.in b/rpm/kernel-binary.spec.in
index 002662f174..9387f4aed4 100644
--- a/rpm/kernel-binary.spec.in
+++ b/rpm/kernel-binary.spec.in
@@ -474,21 +474,6 @@ done
%install
-# sign the modules, firmware and possibly the kernel in the buildservice
-BRP_PESIGN_FILES=""
-%if %CONFIG_EFI_STUB == "y"
-BRP_PESIGN_FILES="/boot/vmlinuz-%kernelrelease-%build_flavor"
-%endif
-%if %CONFIG_MODULE_SIG == "y"
-BRP_PESIGN_FILES="$BRP_PESIGN_FILES *.ko"
-%endif
-%ifarch %ix86
-# XXX: do not sign on x86, as the repackaging changes kernel-pae
-# from i686 to i586
-BRP_PESIGN_FILES=""
-%endif
-export BRP_PESIGN_FILES
-
# get rid of /usr/lib/rpm/brp-strip-debug
# strip removes too much from the vmlinux ELF binary
export NO_BRP_STRIP_DEBUG=true
@@ -569,6 +554,21 @@ add_vmlinux()
cp -p arch/arm64/boot/$image %buildroot/boot/$image-%kernelrelease-%build_flavor
%endif
+# sign the modules, firmware and possibly the kernel in the buildservice
+BRP_PESIGN_FILES=""
+%if %CONFIG_EFI_STUB == "y"
+BRP_PESIGN_FILES="/boot/$image-%kernelrelease-%build_flavor"
+%endif
+%if %CONFIG_MODULE_SIG == "y"
+BRP_PESIGN_FILES="$BRP_PESIGN_FILES *.ko"
+%endif
+%ifarch %ix86
+# XXX: do not sign on x86, as the repackaging changes kernel-pae
+# from i686 to i586
+BRP_PESIGN_FILES=""
+%endif
+export BRP_PESIGN_FILES
+
if test -x /usr/lib/rpm/pesign/gen-hmac; then
$_ -r %buildroot /boot/$image-%kernelrelease-%build_flavor
fi