Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Piotr Morgwai Kotarbinski Newsgroups: linux.debian.kernel Subject: Re: generating linux-image-${VERSION}-amd64 locally Date: Sat, 11 Apr 2026 00:40:01 +0200 Message-ID: References: X-Original-To: ben@decadent.org.uk X-Mailbox-Line: From debian-kernel-request@lists.debian.org Fri Apr 10 22:36:10 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-5.333 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-3.135, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate:hard: -4.6 Autocrypt: addr=foss@morgwai.pl; prefer-encrypt=mutual; keydata= mDMEX/R4BxYJKwYBBAHaRw8BAQdAigFGIbJdGwdk1jqB2fhOHaWrxrkTZhbB/RrkRHlXZBK0 OFBpb3RyIE1vcmd3YWkgS290YXJiaW5za2kgKEZPU1Mgc3R1ZmYpIDxmb3NzQG1vcmd3YWku cGw+iJYEExYIAD4WIQRbWudEytEkU02/C5Np2iPRa+GnKAUCX/R4BwIbAwUJEswDAAULCQgH AgYVCgkICwIEFgIDAQIeAQIXgAAKCRBp2iPRa+GnKIMZAP9wYRmyzNkhg+hhr7dIpVF5xeLH U7t7PtFjVjlNxh8DuAEA5648lesTIKpnoZ2p/zWzv/cysSDgwuWuAn9fv0foywW4OARf9HgH EgorBgEEAZdVAQUBAQdACRAwlLhT3tNkY3kOQs+GHWpulJ9Qr70jH3RlVP2ajnwDAQgHiH4E GBYIACYWIQRbWudEytEkU02/C5Np2iPRa+GnKAUCX/R4BwIbDAUJEswDAAAKCRBp2iPRa+Gn KPL9AP0d7OyTPbALZdtUFV3hICbKJPLfGgdLSIs698gzxSEHwwEAx+4/fa3ka87kWzbTg81U lZxDsgz1r9QHGkb/BYpuLwI= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Authenticated-ID: smtp@morgwai.pl X-Mailing-List: archive/latest/154641 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/e98ff70b-0575-f848-2f27-8d8273b6bc9d@morgwai.pl Approved: robomod@news.nic.it Lines: 50 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-kernel@lists.debian.org X-Original-Date: Sat, 11 Apr 2026 00:20:28 +0200 X-Original-Message-ID: X-Original-References: Xref: csiph.com linux.debian.kernel:91976 Thanks for your reply! :) (almost missed it as you replied only to the list ;-) ) > On Thu, 2026-04-09 at 00:12 +0200, Piotr Morgwai Kotarbinski wrote: >> Hello Debian Kernel Team, >> >> Recently I needed to build packages for the latest mainline kernel to post some logs to kernel.org bugzilla (https://bugzilla.kernel.org/show_bug.cgi?id=221319). I followed the kernel handbook (chapter 4 mainly) and it generally went pretty smoothly and I posted a mini-howTo on Debian Forums: https://forums.debian.net/viewtopic.php?t=166381 > > It is much easier to use "make bindeb-pkg" for this, instead of the > Debian official packaging (section 4.2 in the handbook). For the latest mainline version I needed to go through combination of 4.6+4.7 anyway and then 4.5.4/4.5.5 way spared me messing with the config and personally I found it much simpler this way. >> The only bit that I'm missing is generating `linux-image-${VERSION}-amd64`, so to work-around this, after installing the built packages, I manually call `linux-run-hooks image postinst`. From what I understand, `linux-signed` / `linux-image-${VERSION}-amd64` is generated by Debusine based on `linux-image-amd64-signed-template`, so I was wondering if: >> >> a) ...I can fake this process somewhat and generate `linux-image-${VERSION}-amd64` locally using some scripts and ideally also sign the kernel for example with my dkms MOK, or... >> >> b) ...if the above is over-complicated or not feasible, is it sufficient (for the purpose of setting-up / cleaning-up of kernel images) to create a dummy package that depends on `linux-binary` (and others) with maintainer-scripts generated from `debian/templates/image.p*` templates? If so, is there an easy to use script or a `make` rule to generate these maintainer-scripts from these templates? > > I have used this workaround myself recently, but this will likely stop > working in the near future. In the mean time I've written a small script for this, but editing debian/config/amd64/defines.toml seems like a much better way. > If you actually want to sign the kernel images yourself, you can see how > to do that in done in debian/salsa-ci.yml. Otherwise you should disable > signing of the image by editing debian/config/amd64/defines.toml and > regnerate debian/control before starting the build. Editing debian/config/amd64/defines.toml works great: thanks! :) I'll have a look at debian/salsa-ci.yml later, but signing is not critical for me. > On Fri, 2026-04-10 at 14:58 +0200, Ben Hutchings wrote: > [...] >> I will try to update the instructions in the kernel handbook soon. > > I opened > > for this (and one other change). Could you review the new text there? I've left a few minor comments. Many thanks for explaining all this! :)