kernel/mod-sign.sh
Jan Stancek d7bba455e6 kernel-6.12.0-201.1.el10nv
* Mon Feb 16 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-201.1.el10nv]
- redhat: update build targets for aie-nv (Jan Stancek)
- iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Nicolin Chen) [VOYAGER-1]
- iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Nicolin Chen) [VOYAGER-1]
- iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Nicolin Chen) [VOYAGER-1]
- iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Nicolin Chen) [VOYAGER-1]
- iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jason Gunthorpe) [VOYAGER-1]
- iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Nicolin Chen) [VOYAGER-1]
- iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Nicolin Chen) [VOYAGER-1]
- iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Nicolin Chen) [VOYAGER-1]
- lib/sort.c: add _nonatomic() variants with cond_resched() (Kent Overstreet) [VOYAGER-1]
- lib/sort: clarify comparison function requirements in sort_r() (Kuan-Wei Chiu) [VOYAGER-1]
- sort.h: hoist cmp_int() into generic header file (Fedor Pchelkin) [VOYAGER-1]
- iommu/tegra241-cmdqv: Reset VCMDQ in tegra241_vcmdq_hw_init_user() (Nicolin Chen) [VOYAGER-44]
- mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [VOYAGER-9]
- vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [VOYAGER-9]
- mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [VOYAGER-9]
- mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [VOYAGER-9]
- mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [VOYAGER-9]
- .gitlab-ci.yml: rename c10s_rhel10_compat_merge_request pipeline v2 (Jan Stancek)
- .gitlab-ci.yml: rename c10s_rhel10_compat_merge_request pipeline (Jan Stancek)
- .gitlab-ci.yml: customize pipeline (Jan Stancek)
- redhat: make genlog consider only VOYAGER project issues (Jan Stancek)
- redhat: build only for aarch64 64k and x86_64 variants (Jan Stancek)
- redhat: update self-test-data (Jan Stancek)
- redhat: set up initial Makefile.variables (Jan Stancek)
Resolves: VOYAGER-1, VOYAGER-44, VOYAGER-9

Signed-off-by: Jan Stancek <jstancek@redhat.com>
2026-02-17 08:39:21 +01:00

38 lines
1.1 KiB
Bash
Executable File

#! /bin/bash
# The modules_sign target checks for corresponding .o files for every .ko that
# is signed. This doesn't work for package builds which re-use the same build
# directory for every variant, and the .config may change between variants.
# So instead of using this script to just sign lib/modules/$KernelVer/extra,
# sign all .ko in the buildroot.
# This essentially duplicates the 'modules_sign' Kbuild target and runs the
# same commands for those modules.
MODSECKEY=$1
MODPUBKEY=$2
moddir=$3
modules=$(find "$moddir" -type f -name '*.ko')
NPROC=$(nproc)
[ -z "$NPROC" ] && NPROC=1
# NB: this loop runs 2000+ iterations. Try to be fast.
echo "$modules" | xargs -r -n16 -P "$NPROC" sh -c "
for mod; do
./scripts/sign-file sha256 $MODSECKEY $MODPUBKEY \$mod
rm -f \$mod.sig \$mod.dig
done
" DUMMYARG0 # xargs appends ARG1 ARG2..., which go into $mod in for loop.
RANDOMMOD=$(echo "$modules" | sort -R | head -n 1)
if [ "~Module signature appended~" != "$(tail -c 28 "$RANDOMMOD")" ]; then
echo "*****************************"
echo "*** Modules are unsigned! ***"
echo "*****************************"
exit 1
fi
exit 0