From fcd613400b537b6d40b38d25a499a44dad43a324 Mon Sep 17 00:00:00 2001
From: Marta Rybczynska <marta.rybczynska@linaro.org>
Date: Wed, 26 Oct 2022 10:50:07 +0200
Subject: [PATCH] recipes-kernel: add kernel signing
Add an option to sign kernel enabled withe DISTRO_FEATURE
"kernel-sign".
Signed-off-by: Marta Rybczynska <marta.rybczynska@linaro.org>
---
.../recipes-kernel/linux/linux-oniro-signing.inc | 10 ++++++++++
.../recipes-kernel/linux/linux-oniro_5.10.bb | 1 +
2 files changed, 11 insertions(+)
create mode 100644 meta-oniro-core/recipes-kernel/linux/linux-oniro-signing.inc
diff --git a/meta-oniro-core/recipes-kernel/linux/linux-oniro-signing.inc b/meta-oniro-core/recipes-kernel/linux/linux-oniro-signing.inc
new file mode 100644
index 00000000..16f5ffe9
--- /dev/null
+++ b/meta-oniro-core/recipes-kernel/linux/linux-oniro-signing.inc
@@ -0,0 +1,10 @@
+# SPDX-FileCopyrightText: Linaro Ltd
+#
+# SPDX-License-Identifier: MIT
+
+# From meta-ledge-secure
+require recipes-kernel/linux/linux-ledge-common.inc
+require recipes-kernel/linux/linux-ledge-sign.inc
+
+# Required to do actual signing by the two includes above
+KERNEL_SIGN_ENABLE = "1"
diff --git a/meta-oniro-core/recipes-kernel/linux/linux-oniro_5.10.bb b/meta-oniro-core/recipes-kernel/linux/linux-oniro_5.10.bb
index b7a130dc..212f45d8 100644
--- a/meta-oniro-core/recipes-kernel/linux/linux-oniro_5.10.bb
+++ b/meta-oniro-core/recipes-kernel/linux/linux-oniro_5.10.bb
@@ -17,6 +17,7 @@ SRC_URI = "git://gitlab.eclipse.org/eclipse/oniro-core/linux.git;protocol=https;
"
require recipes-kernel/linux/linux-oniro-tweaks-all.inc
+require ${@oe.utils.all_distro_features(d, 'kernel-sign', 'recipes-kernel/linux/linux-oniro-signing.inc')}
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
LINUX_VERSION ?= "5.10.61"
--
GitLab