[bionic/gcp/master-next,1/1] UBUNTU: [Configuration] enable EFI signing support

BugLink: http://bugs.launchpad.net/bugs/1782557
Signed-off-by: Andy Whitcroft <apw@canonical.com>
---
 debian.gcp/control.d/flavour-control.stub | 13 +++++++------
 debian.gcp/rules.d/amd64.mk               |  1 +
 2 files changed, 8 insertions(+), 6 deletions(-)

On 30.07.2018 14:16, Andy Whitcroft wrote:
> BugLink: http://bugs.launchpad.net/bugs/1782557
> Signed-off-by: Andy Whitcroft <apw@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
> ---

The bug report should have a proper SRU template filled into the description.
Looking at the related bionic signed branch I only saw expected delta (or
whitespace delta) compared to an existing branch.

[Personally I would prefer to have a few more words in the commit message
 but that is just me]

-Stefan

>  debian.gcp/control.d/flavour-control.stub | 13 +++++++------
>  debian.gcp/rules.d/amd64.mk               |  1 +
>  2 files changed, 8 insertions(+), 6 deletions(-)
> 
> diff --git a/debian.gcp/control.d/flavour-control.stub b/debian.gcp/control.d/flavour-control.stub
> index 00e92286893e..31ddf3df9bc9 100644
> --- a/debian.gcp/control.d/flavour-control.stub
> +++ b/debian.gcp/control.d/flavour-control.stub
> @@ -21,7 +21,7 @@
>  #
>  # XXX: Leave the blank line before the first package!!
>  
> -Package: linux-image-PKGVER-ABINUM-FLAVOUR
> +Package: linux-image=SIGN-ME-PKG=-PKGVER-ABINUM-FLAVOUR
>  Build-Profiles: <!stage1>
>  Architecture: ARCH
>  Section: kernel
> @@ -29,10 +29,11 @@ Priority: optional
>  Provides: linux-image, fuse-module, aufs-dkms, =PROVIDES=${linux:rprovides}
>  Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-PKGVER-ABINUM-FLAVOUR
>  Recommends: BOOTLOADER
> -Breaks: flash-kernel (<< 3.0~rc.4ubuntu64) [arm64]
> +Breaks: flash-kernel (<< 3.90ubuntu2) [arm64 armhf], s390-tools (<< 2.3.0-0ubuntu3) [s390x]
> +Conflicts: linux-image=SIGN-PEER-PKG=-PKGVER-ABINUM-FLAVOUR
>  Suggests: fdutils, SRCPKGNAME-doc-PKGVER | SRCPKGNAME-source-PKGVER, SRCPKGNAME-tools, linux-headers-PKGVER-ABINUM-FLAVOUR, initramfs-tools | linux-initramfs-tool
>  Description: Linux kernel image for version PKGVER on DESC
> - This package contains the Linux kernel image for version PKGVER on
> + This package contains the=SIGN-ME-TXT= Linux kernel image for version PKGVER on
>   DESC.
>   .
>   Supports SUPPORTED processors.
> @@ -67,7 +68,7 @@ Build-Profiles: <!stage1>
>  Architecture: ARCH
>  Section: kernel
>  Priority: optional
> -Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-PKGVER-ABINUM-FLAVOUR, crda | wireless-crda
> +Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-PKGVER-ABINUM-FLAVOUR | linux-image-unsigned-PKGVER-ABINUM-FLAVOUR, crda | wireless-crda
>  Description: Linux kernel extra modules for version PKGVER on DESC
>   This package contains the Linux kernel extra modules for version PKGVER on
>   DESC.
> @@ -98,7 +99,7 @@ Description: Linux kernel headers for version PKGVER on DESC
>   This is for sites that want the latest kernel headers.  Please read
>   /usr/share/doc/linux-headers-PKGVER-ABINUM/debian.README.gz for details.
>  
> -Package: linux-image-PKGVER-ABINUM-FLAVOUR-dbgsym
> +Package: linux-image=SIGN-ME-PKG=-PKGVER-ABINUM-FLAVOUR-dbgsym
>  Build-Profiles: <!stage1>
>  Architecture: ARCH
>  Section: devel
> @@ -106,7 +107,7 @@ Priority: optional
>  Depends: ${misc:Depends}
>  Provides: linux-debug
>  Description: Linux kernel debug image for version PKGVER on DESC
> - This package provides a kernel debug image for version PKGVER on
> + This package provides the=SIGN-ME-TXT= kernel debug image for version PKGVER on
>   DESC.
>   .
>   This is for sites that wish to debug the kernel.
> diff --git a/debian.gcp/rules.d/amd64.mk b/debian.gcp/rules.d/amd64.mk
> index 0f7b72b7ce49..3fd4ce36db3e 100644
> --- a/debian.gcp/rules.d/amd64.mk
> +++ b/debian.gcp/rules.d/amd64.mk
> @@ -9,6 +9,7 @@ install_file	= vmlinuz
>  loader		= grub
>  vdso		= vdso_install
>  no_dumpfile	= true
> +uefi_signed     = true
>  do_tools_usbip  = true
>  do_tools_cpupower = true
>  do_tools_perf   = true
>