Skip to content

redhat: spec: re-enable compilation module signing

JIRA: https://issues.redhat.com/browse/RHEL-53349
Upstream Status: RHEL-only

While ostree updates are the intended application, "package mode" installation
(aka standard RPMs) is still available. So someone might dnf install
kernel-automotive and would expect the modules to be signed and loadable. This
is broken if we do not sign at compile time.

Re-introduce the compile time module signature using the generated key from the
kernel build-system. Keep only that key for now as one of the goal was to not
have persistent keys between upgrades. Module signature, if performed during
the image composition will overwrite the compile-time one. The key will still
be in the keyring though.

Signed-off-by: Eric Chanudet echanude@redhat.com

Merge request reports