diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-04-28 16:25:48 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-04-28 16:27:36 +0200 |
| commit | a29a2dfa0fa34743508664ca3d0564a923f904d5 (patch) | |
| tree | 8d2434266b13f9299c1d37f5c902d122da6f80e6 /scripts/package-build/linux-kernel/build-kernel.sh | |
| parent | d1bfa067311a6fdc992765b0bb8c8ff995e1104f (diff) | |
| download | vyos-build-a29a2dfa0fa34743508664ca3d0564a923f904d5.tar.gz vyos-build-a29a2dfa0fa34743508664ca3d0564a923f904d5.zip | |
Kernel: T861: add custom VyOS CA to Kernel builds for later module signing
With this addition we can always sign a Kernel module later and ship it if
needed, without re-compiling the Kernel.
Kernel will report:
[ 1.223891] Loaded X.509 cert 'VyOS Networks Secure Boot Signer 2025 - linux: 6ca57e2add335babd08da69b48c70693edd2b037'
Issuer: CN = VyOS Networks Secure Boot CA
Validity
Not Before: Apr 26 09:07:06 2025 GMT
Not After : Apr 24 09:07:06 2035 GMT
Subject: CN = VyOS Networks Secure Boot Signer 2025 - linux
Diffstat (limited to 'scripts/package-build/linux-kernel/build-kernel.sh')
| -rwxr-xr-x | scripts/package-build/linux-kernel/build-kernel.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/package-build/linux-kernel/build-kernel.sh b/scripts/package-build/linux-kernel/build-kernel.sh index a0364897..5411494d 100755 --- a/scripts/package-build/linux-kernel/build-kernel.sh +++ b/scripts/package-build/linux-kernel/build-kernel.sh @@ -1,6 +1,7 @@ #!/bin/bash CWD=$(pwd) KERNEL_SRC=linux +GIT_ROOT=$(git rev-parse --show-toplevel) set -e @@ -60,7 +61,6 @@ sed -i -e "s/CN =.*/CN=VyOS Networks build time autogenerated Kernel key/" certs TRUSTED_KEYS_FILE=trusted_keys.pem # start with empty key file echo -n "" > $TRUSTED_KEYS_FILE -GIT_ROOT=$(git rev-parse --show-toplevel) CERTS=$(find ${GIT_ROOT}/data/certificates -name "*.pem" -type f || true) if [ ! -z "${CERTS}" ]; then # add known public keys to Kernel certificate chain |