|
|
|
@ -707,32 +707,26 @@ popd > /dev/null
|
|
|
|
|
popd > /dev/null
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
|
|
|
|
|
%define __modsign_install_post \
|
|
|
|
|
if [ "%{signmodules}" -eq "1" ]; then \
|
|
|
|
|
if [ "%{with_std}" -ne "0" ]; then \
|
|
|
|
|
%{SOURCE21} linux-%{version}-%{release}.x86_64/certs/signing_key.pem.sign linux-%{version}-%{release}.x86_64/certs/signing_key.x509.sign $RPM_BUILD_ROOT/lib/modules/%{KVERREL}/ \
|
|
|
|
|
fi \
|
|
|
|
|
fi \
|
|
|
|
|
if [ "%{zipmodules}" -eq "1" ]; then \
|
|
|
|
|
find $RPM_BUILD_ROOT/lib/modules/ -name '*.ko' -type f | xargs --no-run-if-empty -P%{zcpu} xz \
|
|
|
|
|
fi \
|
|
|
|
|
%{nil}
|
|
|
|
|
%define __modsign_install_post %{nil}
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
%define __modsign_install_post_arch linux-%{version}-%{release}.x86_64
|
|
|
|
|
%elifarch aarch64
|
|
|
|
|
%define __modsign_install_post_arch linux-%{version}-%{release}.aarch64
|
|
|
|
|
%else
|
|
|
|
|
%error "Unsupported architecture"
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%ifarch aarch64
|
|
|
|
|
%define __modsign_install_post \
|
|
|
|
|
if [ "%{signmodules}" -eq "1" ]; then \
|
|
|
|
|
if [ "%{with_std}" -ne "0" ]; then \
|
|
|
|
|
%{SOURCE21} linux-%{version}-%{release}.aarch64/certs/signing_key.pem.sign linux-%{version}-%{release}.aarch64/certs/signing_key.x509.sign $RPM_BUILD_ROOT/lib/modules/%{KVERREL}/ \
|
|
|
|
|
%{SOURCE21} %{__modsign_install_post_arch}/certs/signing_key.pem.sign %{__modsign_install_post_arch}/certs/signing_key.x509.sign $RPM_BUILD_ROOT/lib/modules/%{KVERREL}/ \
|
|
|
|
|
fi \
|
|
|
|
|
fi \
|
|
|
|
|
if [ "%{zipmodules}" -eq "1" ]; then \
|
|
|
|
|
find $RPM_BUILD_ROOT/lib/modules/ -name '*.ko' -type f | xargs --no-run-if-empty -P%{zcpu} xz \
|
|
|
|
|
fi \
|
|
|
|
|
%{nil}
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# Ensure modules are signed *after* all invocations of
|
|
|
|
|