diff options
| author | Daniil Baturin <daniil@vyos.io> | 2026-01-15 16:18:47 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-01-15 16:18:47 +0000 |
| commit | af58c8c5ec8a601b5c7ebb4e5e1f7cfa49834c38 (patch) | |
| tree | c8c9695668a694c42bb6cd827f64841ceb168aaa /scripts/package-build/linux-kernel | |
| parent | f43677194feecaeabdecdc53d0aec5de649c874b (diff) | |
| parent | 28879fb01d4bf13237813651d697f38710d4882e (diff) | |
| download | vyos-build-af58c8c5ec8a601b5c7ebb4e5e1f7cfa49834c38.tar.gz vyos-build-af58c8c5ec8a601b5c7ebb4e5e1f7cfa49834c38.zip | |
Merge pull request #1102 from sever-sever/T8181
T8181: Add kernel CONFIG_MODULE_SIG for arm64 architecture
Diffstat (limited to 'scripts/package-build/linux-kernel')
| -rw-r--r-- | scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig b/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig index 0d52d0ab..e9eedeb2 100644 --- a/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig +++ b/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig @@ -813,6 +813,7 @@ CONFIG_FUNCTION_ALIGNMENT=4 CONFIG_RT_MUTEXES=y CONFIG_BASE_SMALL=0 +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set CONFIG_MODULE_FORCE_LOAD=y @@ -822,7 +823,15 @@ CONFIG_MODULE_FORCE_UNLOAD=y CONFIG_MODVERSIONS=y CONFIG_ASM_MODVERSIONS=y # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +CONFIG_MODULE_SIG_FORCE=y +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA1 is not set +# CONFIG_MODULE_SIG_SHA224 is not set +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS_NONE=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -6806,8 +6815,11 @@ CONFIG_SIGNED_PE_FILE_VERIFICATION=y # # Certificates for signature checking # -CONFIG_SYSTEM_TRUSTED_KEYRING=y -CONFIG_SYSTEM_TRUSTED_KEYS="" +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_SYSTEM_TRUSTED_KEYRING is not set +# CONFIG_SYSTEM_TRUSTED_KEYS is not set # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set # CONFIG_SECONDARY_TRUSTED_KEYRING is not set # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set |