Disable MODULE_SIG for architectures not supported by linux-signed

debian/bin/gencontrol.py

@@ -442,8 +442,11 @@ class Gencontrol(Base):
         kconfig.extend(check_config("%s/%s/config" % (arch, featureset), False, arch, featureset))
         kconfig.extend(check_config("%s/%s/config.%s" % (arch, featureset, flavour), False, arch, featureset, flavour))
         makeflags['KCONFIG'] = ' '.join(kconfig)
+        makeflags['KCONFIG_OPTIONS'] = ''
         if build_debug:
-            makeflags['KCONFIG_OPTIONS'] = '-o DEBUG_INFO=y'
+            makeflags['KCONFIG_OPTIONS'] += ' -o DEBUG_INFO=y'
+        if config_entry_build.get('signed-modules'):
+            makeflags['KCONFIG_OPTIONS'] += ' -o MODULE_SIG=y'
 
         cmds_binary_arch = ["$(MAKE) -f debian/rules.real binary-arch-flavour %s" % makeflags]
         if packages_dummy:

debian/changelog

@@ -31,6 +31,7 @@ linux (4.6.1-1~exp1) UNRELEASED; urgency=medium
   * debian/control: Drop obsolete versioned Depends and Breaks
   * linux-libc-dev: Drop obsolete Replaces/Conflicts with linux-kernel-headers
   * debian/control: Update policy version to 3.9.8; no changes required
+  * Disable MODULE_SIG for architectures not supported by linux-signed
 
  -- Ben Hutchings <ben@decadent.org.uk>  Sat, 04 Jun 2016 18:33:11 +0100
 

debian/config/config

@@ -5575,7 +5575,8 @@ CONFIG_MODULE_UNLOAD=y
 CONFIG_MODULE_FORCE_UNLOAD=y
 CONFIG_MODVERSIONS=y
 # CONFIG_MODULE_SRCVERSION_ALL is not set
-CONFIG_MODULE_SIG=y
+#. This is overridden if the [build]signed-modules setting is enabled
+# CONFIG_MODULE_SIG is not set
 #. Signature validation is a run-time option
 # CONFIG_MODULE_SIG_FORCE is not set
 #. Signatures are added in linux-signed