On Thu, 2026-04-09 at 00:12 +0200, Piotr Morgwai Kotarbinski wrote: > Hello Debian Kernel Team, > > Recently I needed to build packages for the latest mainline kernel to post > some logs to kernel.org bugzilla > (https://bugzilla.kernel.org/show_bug.cgi?id=221319). I followed the kernel > handbook (chapter 4 mainly) and it generally went pretty smoothly and I > posted a mini-howTo on Debian Forums: > https://forums.debian.net/viewtopic.php?t=166381
It is much easier to use "make bindeb-pkg" for this, instead of the
Debian official packaging (section 4.2 in the handbook).
> The only bit that I'm missing is generating `linux-image-${VERSION}-amd64`,
> so to work-around this, after installing the built packages, I manually call
> `linux-run-hooks image postinst`. From what I understand, `linux-signed` /
> `linux-image-${VERSION}-amd64` is generated by Debusine based on
> `linux-image-amd64-signed-template`, so I was wondering if:
>
> a) ...I can fake this process somewhat and generate
> `linux-image-${VERSION}-amd64` locally using some scripts and ideally also
> sign the kernel for example with my dkms MOK, or...
>
> b) ...if the above is over-complicated or not feasible, is it sufficient (for
> the purpose of setting-up / cleaning-up of kernel images) to create a dummy
> package that depends on `linux-binary` (and others) with maintainer-scripts
> generated from `debian/templates/image.p*` templates? If so, is there an easy
> to use script or a `make` rule to generate these maintainer-scripts from
> these templates?
I have used this workaround myself recently, but this will likely stop
working in the near future.
If you actually want to sign the kernel images yourself, you can see how
to do that in done in debian/salsa-ci.yml. Otherwise you should disable
signing of the image by editing debian/config/amd64/defines.toml and
regnerate debian/control before starting the build.
I will try to update the instructions in the kernel handbook soon.
Ben.
--
Ben Hutchings
Never attribute to conspiracy what can adequately be explained
by stupidity.
signature.asc
Description: This is a digitally signed message part
