Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #53867
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') |
| Date | 2016-05-01 00:10 +0200 |
| Message-ID | <rtLfj-6Ug-7@gated-at.bofh.it> (permalink) |
| References | (1 earlier) <rtJwS-5qf-19@gated-at.bofh.it> <rtKCC-6j7-3@gated-at.bofh.it> <rtKCC-6j7-1@gated-at.bofh.it> <rtKVY-6rO-1@gated-at.bofh.it> <rtL5G-6vQ-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
On Sat, 2016-04-30 at 23:52 +0200, Santiago Vila wrote:
> On Sat, Apr 30, 2016 at 11:41:09PM +0200, Ben Hutchings wrote:
> >
> > >
> > > >
> > > > Yes, you must do that. Your custom kernel configuration should be
> > > > based on the appropriate file provided in linux-source-4.5. These have
> > > > the CONFIG_MODULE_SIG_ALL, CONFIG_MODULE_SIG_KEY and
> > > > CONFIG_SYSTEM_TRUSTED_KEYS settings removed so that custom kernels will
> > > > get modules signed by a one-time key.
> > > If I have to remove CONFIG_SYSTEM_TRUSTED_KEYS by hand, then
> > > documentation is wrong.
> > [...]
> >
> > Oh, I see the problem. I didn't realise that the local{mod,yes}config
> > rules would (a) copy the config file from /boot or (b) keep the keyring
> > config symbols unchanged.
> Thanks a lot!
>
>
> I have a related question: I know that you spent some time making
> linux-image build reproducible. If by way of this module signing thing
> the linux-image distributed by Debian is based on your key, does this
> not make the build unreproducible again?
The official packages are still reproducible. See
<https://www.decadent.org.uk/ben/talks/secure-boot-linux-package.pdf>
Ben.
--
Ben Hutchings
73.46% of all statistics are made up.
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem' Santiago Vila <sanvila@unex.es> - 2016-04-30 22:20 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Santiago Vila <sanvila@unex.es> - 2016-04-30 23:30 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Ben Hutchings <ben@decadent.org.uk> - 2016-04-30 23:50 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Santiago Vila <sanvila@unex.es> - 2016-05-01 00:00 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Ben Hutchings <ben@decadent.org.uk> - 2016-05-01 00:10 +0200
Processed: Re: Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') owner@bugs.debian.org (Debian Bug Tracking System) - 2016-04-30 23:50 +0200
csiph-web