debian/config: Add config variable to control module signing in linux-signed
- Enable it by default - Disable it for armel/marvell since signature verification is not enabled. - Disable it for mips and mipsel so linux-signed can be uploaded without waiting for them to build - Disable it for all architectures not in the main archive, as linux-signed won't support them (at least, not initially). We don't need a variable to control signing of the image, because we should do that for all flavours that have CONFIG_EFI_STUB=y.
This commit is contained in:
parent
6e18d075e9
commit
516d9dac1d
|
@ -23,6 +23,7 @@ class Gencontrol(Base):
|
||||||
},
|
},
|
||||||
'build': {
|
'build': {
|
||||||
'debug-info': config.SchemaItemBoolean(),
|
'debug-info': config.SchemaItemBoolean(),
|
||||||
|
'signed-modules': config.SchemaItemBoolean(),
|
||||||
'vdso': config.SchemaItemBoolean(),
|
'vdso': config.SchemaItemBoolean(),
|
||||||
},
|
},
|
||||||
'description': {
|
'description': {
|
||||||
|
|
|
@ -4,6 +4,8 @@ kernel-arch: alpha
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: arch/alpha/boot/vmlinux.gz
|
image-file: arch/alpha/boot/vmlinux.gz
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
suggests: aboot, fdutils
|
suggests: aboot, fdutils
|
||||||
|
|
|
@ -17,6 +17,10 @@ install-stem: vmlinuz
|
||||||
[relations]
|
[relations]
|
||||||
headers%gcc-5: linux-compiler-gcc-5-arm
|
headers%gcc-5: linux-compiler-gcc-5-arm
|
||||||
|
|
||||||
|
[marvell_build]
|
||||||
|
# Signature verification disabled to save on code size
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[marvell_description]
|
[marvell_description]
|
||||||
hardware: Marvell Kirkwood/Orion
|
hardware: Marvell Kirkwood/Orion
|
||||||
hardware-long: Marvell Kirkwood based systems (SheevaPlug, QNAP TS-119/TS-219, etc)
|
hardware-long: Marvell Kirkwood based systems (SheevaPlug, QNAP TS-119/TS-219, etc)
|
||||||
|
|
|
@ -31,6 +31,10 @@ featuresets:
|
||||||
none
|
none
|
||||||
rt
|
rt
|
||||||
|
|
||||||
|
[build]
|
||||||
|
# Enable module signing by default (implemented in the linux-signed package)
|
||||||
|
signed-modules: true
|
||||||
|
|
||||||
[featureset-rt_base]
|
[featureset-rt_base]
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
|
|
|
@ -4,6 +4,8 @@ kernel-arch: parisc
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
suggests: palo
|
suggests: palo
|
||||||
|
|
|
@ -6,6 +6,8 @@ kernel-arch: m68k
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux.gz
|
image-file: vmlinux.gz
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
suggests: vmelilo, fdutils
|
suggests: vmelilo, fdutils
|
||||||
|
|
|
@ -7,6 +7,8 @@ kernel-arch: mips
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed should not wait for slow builds
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
install-stem: vmlinux
|
install-stem: vmlinux
|
||||||
|
|
|
@ -6,6 +6,8 @@ kernel-arch: mips
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
install-stem: vmlinux
|
install-stem: vmlinux
|
||||||
|
|
|
@ -7,6 +7,8 @@ kernel-arch: mips
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
install-stem: vmlinux
|
install-stem: vmlinux
|
||||||
|
|
|
@ -9,6 +9,8 @@ kernel-arch: mips
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed should not wait for slow builds
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
install-stem: vmlinux
|
install-stem: vmlinux
|
||||||
|
|
|
@ -5,6 +5,8 @@ kernel-arch: powerpc
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
vdso: true
|
vdso: true
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
|
|
|
@ -5,6 +5,8 @@ kernel-arch: powerpc
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: vmlinux
|
image-file: vmlinux
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
vdso: true
|
vdso: true
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
|
|
|
@ -6,6 +6,8 @@ kernel-arch: sh
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: arch/sh/boot/zImage
|
image-file: arch/sh/boot/zImage
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
suggests: fdutils
|
suggests: fdutils
|
||||||
|
|
|
@ -6,6 +6,8 @@ kernel-arch: sparc
|
||||||
|
|
||||||
[build]
|
[build]
|
||||||
image-file: arch/sparc/boot/zImage
|
image-file: arch/sparc/boot/zImage
|
||||||
|
# linux-signed only works for architectures in the main archive
|
||||||
|
signed-modules: false
|
||||||
|
|
||||||
[image]
|
[image]
|
||||||
configs:
|
configs:
|
||||||
|
|
Loading…
Reference in New Issue