Re: Re: kernel-build.eclass: disable MOD_SIG

Michał Górny <[email protected]> Wed, 27 May 2026 18:39:29 +0200

Newsgroups	gmane.linux.gentoo.devel
Organization	Gentoo
Message-ID	<[email protected]>

On Wed, 2026-05-27 at 17:31 +0100, Immolo wrote:
> Based on mgorny's quick review, I have moved the merge_config
> part outside of the if statement.
> 
> Thanks
> 
> immolo
> 
> From def03a97c874d4b47c89a233d0987610cb72d72a Mon Sep 17 00:00:00 2001
> From: Ian Jordan <[email protected]>
> Date: Wed, 27 May 2026 16:57:37 +0100
> Subject: [PATCH] kernel-build.eclass: disable MOD_SIG
> 
> Add an else statement to remove Debian's on by
> default module signing.
> 
> Signed-off-by: Ian Jordan <[email protected]>
> ---
>  eclass/kernel-build.eclass | 9 ++++++++-
>  1 file changed, 8 insertions(+), 1 deletion(-)
> 
> diff --git a/eclass/kernel-build.eclass b/eclass/kernel-build.eclass
> index 14785efd8eed..d174e810c57d 100644
> --- a/eclass/kernel-build.eclass
> +++ b/eclass/kernel-build.eclass
> @@ -740,9 +740,16 @@ kernel-build_merge_configs() {
>   CONFIG_MODULE_SIG_FORCE=y
>   CONFIG_MODULE_SIG_${MODULES_SIGN_HASH^^}=y
>   EOF
> - merge_configs+=( "${WORKDIR}/modules-sign.config" )
> + else
> + cat <<-EOF > "${WORKDIR}/modules-sign.config" || die
> + ## Disable module signing
> + CONFIG_MODULE_SIG=n
> + CONFIG_MODULE_SIG_ALL=n
> + EOF
>   fi
> 
> + merge_configs+=( "${WORKDIR}/modules-sign.config" )
> +
>   # Only semi-related but let's use that to avoid changing stable ebuilds.
>   if [[ ${KERNEL_IUSE_GENERIC_UKI} ]]; then
>   # NB: we enable support for compressed modules even with

You need to use `git send-email`, your client (webUI?) messes up
whitespace.

-- 
Best regards,
Michał Górny

signature.asc (application/pgp-signature, 293 B)