The gentoo-kernel-bin does not have IUSE=modules-sign, but it does
have signed modules if it was built with KERNEL_IUSE_MODULES_SIGN.
Enforce signature verification in the test phase for this case.

Signed-off-by: Nowa Ammerlaan <[email protected]>
---
 eclass/kernel-install.eclass | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass
index 67143278f368..e753592c46fc 100644
--- a/eclass/kernel-install.eclass
+++ b/eclass/kernel-install.eclass
@@ -478,7 +478,11 @@ kernel-install_test() {
        esac
 
        if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
-               use modules-sign && qemu_extra_append+=" module.sig_enforce=1"
+               # If KERNEL_IUSE_MODULES_SIGN, but no IUSE=modules-sign,
+               # then this is gentoo-kernel-bin test phase with signed mods.
+               if ! in_iuse modules-sign || use modules-sign; then
+                       qemu_extra_append+=" module.sig_enforce=1"
+               fi
        fi
 
        cat > run.sh <<-EOF || die
-- 
2.50.1


Reply via email to