From: Dave Airlie <[email protected]> redhat: add nvidia oot signing key
This adds the nvidia out-of-tree signing key to the RHEL kernels, this key will be used to sign nvidia out-of-tree drivers for RHEL. Signed-off-by: Dave Airlie <[email protected]> diff --git a/redhat/Makefile b/redhat/Makefile index blahblah..blahblah 100644 --- a/redhat/Makefile +++ b/redhat/Makefile @@ -681,6 +681,7 @@ sources-rh: $(TARBALL) generate-testpatch-tmp setup-source dist-configs-check scripts/gating/rpminspect.yaml > $(SOURCES)/rpminspect.yaml @cp scripts/kernel-tools/kvm_stat.logrotate \ keys/rhel*.x509 \ + keys/nvidia*.x509 \ kabi/check-kabi \ configs/$(SPECPACKAGE_NAME)-*.config \ configs/partial*.config \ diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100644 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -935,6 +935,7 @@ Source87: flavors Source100: rheldup3.x509 Source101: rhelkpatch1.x509 +Source102: nvidiagpuoot001.x509 Source200: check-kabi @@ -1879,7 +1880,8 @@ done %if %{signkernel}%{signmodules} openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem -cat rheldup3.pem rhelkpatch1.pem > ../certs/rhel.pem +openssl x509 -inform der -in %{SOURCE102} -out nvidiagpuoot001.pem +cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem > ../certs/rhel.pem %ifarch s390x ppc64le openssl x509 -inform der -in %{secureboot_ca_0} -out secureboot.pem cat secureboot.pem >> ../certs/rhel.pem diff --git a/redhat/keys/nvidiagpuoot001.x509 b/redhat/keys/nvidiagpuoot001.x509 new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/keys/nvidiagpuoot001.x509 Binary files /dev/null and b/redhat/keys/nvidiagpuoot001.x509 differ -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2936 -- _______________________________________________ kernel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
