Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #735633
| From | Santiago Vila <sanvila@unex.es> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') |
| Date | 2016-05-01 00:00 +0200 |
| Message-ID | <rtL5G-6vQ-7@gated-at.bofh.it> (permalink) |
| References | <rtK9A-5Lq-11@gated-at.bofh.it> <rtJwS-5qf-19@gated-at.bofh.it> <rtKCC-6j7-3@gated-at.bofh.it> <rtKCC-6j7-1@gated-at.bofh.it> <rtKVY-6rO-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
On Sat, Apr 30, 2016 at 11:41:09PM +0200, Ben Hutchings wrote:
> > > Yes, you must do that. Your custom kernel configuration should be
> > > based on the appropriate file provided in linux-source-4.5. These have
> > > the CONFIG_MODULE_SIG_ALL, CONFIG_MODULE_SIG_KEY and
> > > CONFIG_SYSTEM_TRUSTED_KEYS settings removed so that custom kernels will
> > > get modules signed by a one-time key.
> > If I have to remove CONFIG_SYSTEM_TRUSTED_KEYS by hand, then
> > documentation is wrong.
> [...]
>
> Oh, I see the problem. I didn't realise that the local{mod,yes}config
> rules would (a) copy the config file from /boot or (b) keep the keyring
> config symbols unchanged.
Thanks a lot!
I have a related question: I know that you spent some time making
linux-image build reproducible. If by way of this module signing thing
the linux-image distributed by Debian is based on your key, does this
not make the build unreproducible again?
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem' Santiago Vila <sanvila@unex.es> - 2016-04-30 22:20 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Santiago Vila <sanvila@unex.es> - 2016-04-30 23:30 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Ben Hutchings <ben@decadent.org.uk> - 2016-04-30 23:50 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Santiago Vila <sanvila@unex.es> - 2016-05-01 00:00 +0200
Bug#823107: linux: make deb-pkg fails: No rule to make target 'debian/certs/benh@debian.org.cert.pem') Ben Hutchings <ben@decadent.org.uk> - 2016-05-01 00:10 +0200
csiph-web