Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-05-21 Thread Ben Hutchings
On Sat, 2016-05-21 at 15:31 -0300, Lucas De Marchi wrote: > On Wed, Apr 13, 2016 at 7:00 AM, Ben Hutchings wrote: > > > > On Wed, 2016-04-13 at 01:05 -0300, Lucas De Marchi wrote: > > > > > > Hi, > > > > > > CC'ing Rusty > > > > > > On Mon, Apr 4, 2016 at 9:32 PM, Ben

Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-05-21 Thread Marco d'Itri
On May 21, Lucas De Marchi wrote: > And how is this signature prepared? Since it needs the compiled > module it would be a matter of changing the compiler, even minor > version, to invalidate the argument of reproducible build. It seems > very fragile to me. But this

Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-05-21 Thread Lucas De Marchi
On Wed, Apr 13, 2016 at 7:00 AM, Ben Hutchings wrote: > On Wed, 2016-04-13 at 01:05 -0300, Lucas De Marchi wrote: >> Hi, >> >> CC'ing Rusty >> >> On Mon, Apr 4, 2016 at 9:32 PM, Ben Hutchings wrote: >> > >> > Debian will not sign modules during the

Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-05-17 Thread Ben Hutchings
On Wed, 2016-04-13 at 11:00 +0100, Ben Hutchings wrote: > On Wed, 2016-04-13 at 01:05 -0300, Lucas De Marchi wrote: > > > > Hi, > > > > CC'ing Rusty > > > > On Mon, Apr 4, 2016 at 9:32 PM, Ben Hutchings wrote: > > > > > > > > > Debian will not sign modules during the

Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-04-13 Thread Ben Hutchings
On Wed, 2016-04-13 at 01:05 -0300, Lucas De Marchi wrote: > Hi, > > CC'ing Rusty > > On Mon, Apr 4, 2016 at 9:32 PM, Ben Hutchings wrote: > > > > Debian will not sign modules during the kernel package build, as this > > conflicts with the goal of reproducible builds.  

Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-04-12 Thread Lucas De Marchi
Hi, CC'ing Rusty On Mon, Apr 4, 2016 at 9:32 PM, Ben Hutchings wrote: > Debian will not sign modules during the kernel package build, as this > conflicts with the goal of reproducible builds. Instead, we will > generate detached signatures offline and include them in a

Bug#820010: [PATCH v2] libkmod: Add support for detached module signatures

2016-04-04 Thread Ben Hutchings
Debian will not sign modules during the kernel package build, as this conflicts with the goal of reproducible builds. Instead, we will generate detached signatures offline and include them in a second package. We could attach the signatures when building this second package or at installation