commit: c1992bfafece7b495785d4838a2d5ccb19a80b71
Author: Nowa Ammerlaan <nowa <AT> gentoo <DOT> org>
AuthorDate: Sun Jul 20 18:08:26 2025 +0000
Commit: Nowa Ammerlaan <nowa <AT> gentoo <DOT> org>
CommitDate: Sun Jul 20 18:10:40 2025 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1992bfa
kernel-install.eclass: support test of bin kernel with signed modules
The gentoo-kernel-bin does not have IUSE=modules-sign, but it does
have signed modules if it was built with KERNEL_IUSE_MODULES_SIGN.
Enforce signature verification in the test phase for this case.
Signed-off-by: Nowa Ammerlaan <nowa <AT> gentoo.org>
eclass/kernel-install.eclass | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass
index 67143278f368..e753592c46fc 100644
--- a/eclass/kernel-install.eclass
+++ b/eclass/kernel-install.eclass
@@ -478,7 +478,11 @@ kernel-install_test() {
esac
if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
- use modules-sign && qemu_extra_append+=" module.sig_enforce=1"
+ # If KERNEL_IUSE_MODULES_SIGN, but no IUSE=modules-sign,
+ # then this is gentoo-kernel-bin test phase with signed mods.
+ if ! in_iuse modules-sign || use modules-sign; then
+ qemu_extra_append+=" module.sig_enforce=1"
+ fi
fi
cat > run.sh <<-EOF || die
