manually sign kernel modules

itsManjeet · Jul 30, 2024 · a0b80c2 · a0b80c2
1 parent 6259d03
commit a0b80c2
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/elements/components/nvidia.yml b/elements/components/nvidia.yml
@@ -29,8 +29,8 @@ script: |-
   make KERNEL_UNAME=$KERNEL_VERSION modules
   make -j1 modules_install INSTALL_MOD_PATH=%{install-root}%{prefix} KERNEL_UNAME=$KERNEL_VERSION
 
-  openssl x509 -inform PEM -outform DER -in linux-module-cert.crt -out linux-module-cert.cer
-  find '%{install-root}%{libdir}/modules' -type f -name "*.ko" -exec sign-file sha512 linux-module-cert.key linux-module-cert.cer {} ';' -exec xz --lzma2=dict=2MiB {} ';'
+  openssl x509 -inform PEM -outform DER -in %{build-root}/linux-module-cert.crt -out linux-module-cert.cer
+  find '%{install-root}%{libdir}/modules' -type f -name "*.ko" -exec %{libdir}/modules/${KERNEL_VERSION}/source/scripts/sign-file sha512 %{build-root}/linux-module-cert.key linux-module-cert.cer {} ';' -exec xz --lzma2=dict=2MiB {} ';'
 
   cd ..
   tar -xf nvidia-persistenced-init.tar.bz2

diff --git a/elements/kernel/linux.yml b/elements/kernel/linux.yml
@@ -8522,14 +8522,16 @@ script: |-
   # end of Kernel hacking
   
 
+  make olddefconfig
+  
   make ${MAKEFLAGS}
   
   make -j1 INSTALL_MOD_PATH='%{install-root}/%{prefix}' DEPMOD=/bin/true modules_install
   release=$(make -s kernelrelease)
   image_name=$(make -s image_name)
 
   openssl x509 -inform PEM -outform DER -in linux-module-cert.crt -out linux-module-cert.cer
-  find '%{install-root}%{libdir}/modules' -type f -name "*.ko" -exec sign-file sha512 linux-module-cert.key linux-module-cert.cer {} ';' -exec xz --lzma2=dict=2MiB {} ';'
+  find '%{install-root}%{libdir}/modules' -type f -name "*.ko" -exec ./scripts/sign-file sha512 linux-module-cert.key linux-module-cert.cer {} ';' -exec xz --lzma2=dict=2MiB {} ';'
 
   install -Dm644 -t %{install-root}/%{libdir}/modules/${release} ${image_name}
   install -Dm644 -t %{install-root}/%{libdir}/modules/${release} System.map