Sign kernels with pesign if we're build with signmodules.

This is jwb's patch modified to work with %pesign .
This commit is contained in:
Peter Jones 2012-08-14 15:40:18 -04:00
parent 2b2f139262
commit d3182f8335

View File

@ -552,6 +552,7 @@ BuildRequires: rpm-build >= 4.9.0-1, elfutils >= elfutils-0.153-1
%if %{signmodules} %if %{signmodules}
BuildRequires: gnupg BuildRequires: gnupg
BuildRequires: pesign >= 0.10-3
%endif %endif
Source0: ftp://ftp.kernel.org/pub/linux/kernel/v3.0/linux-%{kversion}.tar.xz Source0: ftp://ftp.kernel.org/pub/linux/kernel/v3.0/linux-%{kversion}.tar.xz
@ -1590,6 +1591,11 @@ BuildKernel() {
if [ -f arch/$Arch/boot/zImage.stub ]; then if [ -f arch/$Arch/boot/zImage.stub ]; then
cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/%{image_install_path}/zImage.stub-$KernelVer || : cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/%{image_install_path}/zImage.stub-$KernelVer || :
fi fi
%if %{signmodules}
# Sign the image if we're using EFI
%pesign -s -i $KernelImage -o vmlinuz.signed
mv vmlinuz.signed $KernelImage
%endif
$CopyKernel $KernelImage \ $CopyKernel $KernelImage \
$RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer
chmod 755 $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer chmod 755 $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer