[xenial/gcp/master,1/1] UBUNTU: [Configuration] enable EFI signing support

Message ID 20180730121611.10488-3-apw@canonical.com
State New
Headers show
Series
  • [bionic/gcp/master-next,1/1] UBUNTU: [Configuration] enable EFI signing support
Related show

Commit Message

Andy Whitcroft July 30, 2018, 12:16 p.m.
BugLink: http://bugs.launchpad.net/bugs/1782557
Signed-off-by: Andy Whitcroft <apw@canonical.com>
---
 debian.gcp-xenial/control.d/flavour-control.stub | 13 +++++++------
 debian.gcp-xenial/rules.d/amd64.mk               |  1 +
 2 files changed, 8 insertions(+), 6 deletions(-)

Comments

Stefan Bader July 30, 2018, 1:26 p.m. | #1
On 30.07.2018 14:16, Andy Whitcroft wrote:
> BugLink: http://bugs.launchpad.net/bugs/1782557
> Signed-off-by: Andy Whitcroft <apw@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
> ---

Same words as for Bionic...

>  debian.gcp-xenial/control.d/flavour-control.stub | 13 +++++++------
>  debian.gcp-xenial/rules.d/amd64.mk               |  1 +
>  2 files changed, 8 insertions(+), 6 deletions(-)
> 
> diff --git a/debian.gcp-xenial/control.d/flavour-control.stub b/debian.gcp-xenial/control.d/flavour-control.stub
> index 0bf56dcc03c6..f790d4242649 100644
> --- a/debian.gcp-xenial/control.d/flavour-control.stub
> +++ b/debian.gcp-xenial/control.d/flavour-control.stub
> @@ -21,7 +21,7 @@
>  #
>  # XXX: Leave the blank line before the first package!!
>  
> -Package: linux-image-PKGVER-ABINUM-FLAVOUR
> +Package: linux-image=SIGN-ME-PKG=-PKGVER-ABINUM-FLAVOUR
>  Build-Profiles: <!stage1>
>  Architecture: ARCH
>  Section: kernel
> @@ -29,10 +29,11 @@ Priority: optional
>  Provides: linux-image, fuse-module, aufs-dkms, =PROVIDES=${linux:rprovides}
>  Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-PKGVER-ABINUM-FLAVOUR
>  Recommends: BOOTLOADER
> -Breaks: flash-kernel (<< 3.0~rc.4ubuntu62.2) [arm64]
> +Breaks: flash-kernel (<< 3.0~rc.4ubuntu62.2) [arm64], s390-tools (<< 1.34.0-0ubuntu8.6) [s390x]
> +Conflicts: linux-image=SIGN-PEER-PKG=-PKGVER-ABINUM-FLAVOUR
>  Suggests: fdutils, SRCPKGNAME-doc-PKGVER | SRCPKGNAME-source-PKGVER, SRCPKGNAME-tools, linux-headers-PKGVER-ABINUM-FLAVOUR, initramfs-tools | linux-initramfs-tool
>  Description: Linux kernel image for version PKGVER on DESC
> - This package contains the Linux kernel image for version PKGVER on
> + This package contains the=SIGN-ME-TXT= Linux kernel image for version PKGVER on
>   DESC.
>   .
>   Supports SUPPORTED processors.
> @@ -67,7 +68,7 @@ Build-Profiles: <!stage1>
>  Architecture: ARCH
>  Section: kernel
>  Priority: optional
> -Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-PKGVER-ABINUM-FLAVOUR, crda | wireless-crda
> +Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-PKGVER-ABINUM-FLAVOUR | linux-image-unsigned-PKGVER-ABINUM-FLAVOUR, crda | wireless-crda
>  Description: Linux kernel extra modules for version PKGVER on DESC
>   This package contains the Linux kernel extra modules for version PKGVER on
>   DESC.
> @@ -98,7 +99,7 @@ Description: Linux kernel headers for version PKGVER on DESC
>   This is for sites that want the latest kernel headers.  Please read
>   /usr/share/doc/linux-headers-PKGVER-ABINUM/debian.README.gz for details.
>  
> -Package: linux-image-PKGVER-ABINUM-FLAVOUR-dbgsym
> +Package: linux-image=SIGN-ME-PKG=-PKGVER-ABINUM-FLAVOUR-dbgsym
>  Build-Profiles: <!stage1>
>  Architecture: ARCH
>  Section: devel
> @@ -106,7 +107,7 @@ Priority: optional
>  Depends: ${misc:Depends}
>  Provides: linux-debug
>  Description: Linux kernel debug image for version PKGVER on DESC
> - This package provides a kernel debug image for version PKGVER on
> + This package provides the=SIGN-ME-TXT= kernel debug image for version PKGVER on
>   DESC.
>   .
>   This is for sites that wish to debug the kernel.
> diff --git a/debian.gcp-xenial/rules.d/amd64.mk b/debian.gcp-xenial/rules.d/amd64.mk
> index 0f7b72b7ce49..3fd4ce36db3e 100644
> --- a/debian.gcp-xenial/rules.d/amd64.mk
> +++ b/debian.gcp-xenial/rules.d/amd64.mk
> @@ -9,6 +9,7 @@ install_file	= vmlinuz
>  loader		= grub
>  vdso		= vdso_install
>  no_dumpfile	= true
> +uefi_signed     = true
>  do_tools_usbip  = true
>  do_tools_cpupower = true
>  do_tools_perf   = true
>

Patch

diff --git a/debian.gcp-xenial/control.d/flavour-control.stub b/debian.gcp-xenial/control.d/flavour-control.stub
index 0bf56dcc03c6..f790d4242649 100644
--- a/debian.gcp-xenial/control.d/flavour-control.stub
+++ b/debian.gcp-xenial/control.d/flavour-control.stub
@@ -21,7 +21,7 @@ 
 #
 # XXX: Leave the blank line before the first package!!
 
-Package: linux-image-PKGVER-ABINUM-FLAVOUR
+Package: linux-image=SIGN-ME-PKG=-PKGVER-ABINUM-FLAVOUR
 Build-Profiles: <!stage1>
 Architecture: ARCH
 Section: kernel
@@ -29,10 +29,11 @@  Priority: optional
 Provides: linux-image, fuse-module, aufs-dkms, =PROVIDES=${linux:rprovides}
 Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-PKGVER-ABINUM-FLAVOUR
 Recommends: BOOTLOADER
-Breaks: flash-kernel (<< 3.0~rc.4ubuntu62.2) [arm64]
+Breaks: flash-kernel (<< 3.0~rc.4ubuntu62.2) [arm64], s390-tools (<< 1.34.0-0ubuntu8.6) [s390x]
+Conflicts: linux-image=SIGN-PEER-PKG=-PKGVER-ABINUM-FLAVOUR
 Suggests: fdutils, SRCPKGNAME-doc-PKGVER | SRCPKGNAME-source-PKGVER, SRCPKGNAME-tools, linux-headers-PKGVER-ABINUM-FLAVOUR, initramfs-tools | linux-initramfs-tool
 Description: Linux kernel image for version PKGVER on DESC
- This package contains the Linux kernel image for version PKGVER on
+ This package contains the=SIGN-ME-TXT= Linux kernel image for version PKGVER on
  DESC.
  .
  Supports SUPPORTED processors.
@@ -67,7 +68,7 @@  Build-Profiles: <!stage1>
 Architecture: ARCH
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-PKGVER-ABINUM-FLAVOUR, crda | wireless-crda
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-PKGVER-ABINUM-FLAVOUR | linux-image-unsigned-PKGVER-ABINUM-FLAVOUR, crda | wireless-crda
 Description: Linux kernel extra modules for version PKGVER on DESC
  This package contains the Linux kernel extra modules for version PKGVER on
  DESC.
@@ -98,7 +99,7 @@  Description: Linux kernel headers for version PKGVER on DESC
  This is for sites that want the latest kernel headers.  Please read
  /usr/share/doc/linux-headers-PKGVER-ABINUM/debian.README.gz for details.
 
-Package: linux-image-PKGVER-ABINUM-FLAVOUR-dbgsym
+Package: linux-image=SIGN-ME-PKG=-PKGVER-ABINUM-FLAVOUR-dbgsym
 Build-Profiles: <!stage1>
 Architecture: ARCH
 Section: devel
@@ -106,7 +107,7 @@  Priority: optional
 Depends: ${misc:Depends}
 Provides: linux-debug
 Description: Linux kernel debug image for version PKGVER on DESC
- This package provides a kernel debug image for version PKGVER on
+ This package provides the=SIGN-ME-TXT= kernel debug image for version PKGVER on
  DESC.
  .
  This is for sites that wish to debug the kernel.
diff --git a/debian.gcp-xenial/rules.d/amd64.mk b/debian.gcp-xenial/rules.d/amd64.mk
index 0f7b72b7ce49..3fd4ce36db3e 100644
--- a/debian.gcp-xenial/rules.d/amd64.mk
+++ b/debian.gcp-xenial/rules.d/amd64.mk
@@ -9,6 +9,7 @@  install_file	= vmlinuz
 loader		= grub
 vdso		= vdso_install
 no_dumpfile	= true
+uefi_signed     = true
 do_tools_usbip  = true
 do_tools_cpupower = true
 do_tools_perf   = true