Re: [ptxdist] [PATCH v3 1/5] kernel: make sure that kbuild can extract keys from the HSM

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Sun, Sep 12, 2021 at 10:59:21PM +0200, Roland Hieber wrote:
> CODE_SIGNING_ENV provides the config files and the PKCS11 engine for
> OpenSSL and SoftHSM, which kbuild calls when signing the kernel modules.
> 
> Fixes: 3ffb3585dd13de9e20d1 (2021-07-23, "kernel: add support for module signing")
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> ---
> PATCH v3:
>  - new in v3, and yet another case of "how did this ever work before?"
> ---
>  rules/kernel.make | 6 ++++++
>  1 file changed, 6 insertions(+)
> 
> diff --git a/rules/kernel.make b/rules/kernel.make
> index 9caff677918e..7a4642f3d07f 100644
> --- a/rules/kernel.make
> +++ b/rules/kernel.make
> @@ -187,6 +187,9 @@ $(STATEDIR)/kernel.tags:
>  # Compile
>  # ----------------------------------------------------------------------------
>  
> +KERNEL_MAKE_ENV		+= \
> +	$(CODE_SIGNING_ENV)
> +
>  KERNEL_MAKE_OPT		= \
>  	$(call kernel/deprecated, KERNEL_MAKE_OPT) \
>  	$(KERNEL_SHARED_OPT) \
> @@ -254,6 +257,9 @@ endif
>  # Install
>  # ----------------------------------------------------------------------------
>  
> +KERNEL_INSTALL_ENV	+= \
> +	$(CODE_SIGNING_ENV)

This should not be needed. KERNEL_MAKE_ENV should be used for compile and
install. Build with '-v' to see the commandline.

Michael

> +
>  KERNEL_INSTALL_OPT = \
>  	$(KERNEL_BASE_OPT) \
>  	modules_install
> -- 
> 2.30.2
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de
> To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de
> 

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de