diff options
| author | Matthew Kobayashi <matthew@kobayashi.au> | 2026-10-22 10:16:46 +1000 |
|---|---|---|
| committer | Matthew Kobayashi <matthew@kobayashi.au> | 2026-10-26 10:36:35 +1000 |
| commit | db65cb49b2163874314e49fc9bf4d1d19faccd70 (patch) | |
| tree | 4e5389b4b46e44f24f801b917ac529dde5e4bb25 /scripts | |
| parent | 4d866b0ac68c73f89a2cf495f05a053b1b53517d (diff) | |
| download | vyos-build-db65cb49b2163874314e49fc9bf4d1d19faccd70.tar.gz vyos-build-db65cb49b2163874314e49fc9bf4d1d19faccd70.zip | |
secure-boot: T861: decompress kernel for ARM64 signing
Detect gzip-wrapped kernels and stage decompressed input for both
development-key and HSM signing. Install the signed, uncompressed image
only after sbverify succeeds. Keep decompression, signing, and
verification failures fatal, preserve the original kernel and clean
temporary input. Leave already-uncompressed kernels on the existing
signing path.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions