• [gentoo-dev] [PATCH] kernel-install.eclass: support test of bin kernel

    From Nowa Ammerlaan@21:1/5 to All on Sun Jul 20 20:20:01 2025
    The gentoo-kernel-bin does not have IUSE=modules-sign, but it does
    have signed modules if it was built with KERNEL_IUSE_MODULES_SIGN.
    Enforce signature verification in the test phase for this case.

    Signed-off-by: Nowa Ammerlaan <[email protected]>
    ---
    eclass/kernel-install.eclass | 6 +++++-
    1 file changed, 5 insertions(+), 1 deletion(-)

    diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass
    index 67143278f368..e753592c46fc 100644
    --- a/eclass/kernel-install.eclass
    +++ b/eclass/kernel-install.eclass
    @@ -478,7 +478,11 @@ kernel-install_test() {
    esac

    if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
    - use modules-sign && qemu_extra_append+=" module.sig_enforce=1" + # If KERNEL_IUSE_MODULES_SIGN, but no IUSE=modules-sign,
    + # then this is gentoo-kernel-bin test phase with signed mods.
    + if ! in_iuse modules-sign || use modules-sign; then
    + qemu_extra_append+=" module.sig_enforce=1"
    + fi
    fi

    cat > run.sh <<-EOF || die
    --
    2.50.1

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)