APPLIED: [Disco] LP:1764792 -- produce signatures for nvidia dkms modules

[Seth Forshee]

On Wed, Dec 19, 2018 at 03:40:20PM +0000, Andy Whitcroft wrote:
> We are working up to producing signed Nvidia modules.  We cannot ship
> those assembled due to licensing but we wish for the result to be a
> working .ko which is signed into the kernels kernel-module signing key.
> 
> To do this we will build the dkms modules in a reproducible manner which
> allows them to be linked on installation on the end-user system (meeting
> the licensing constraints).  As the build is reproducible we are able
> to build, sign, and discard the modules in the primary kernel build
> keeping only the signatures.  These will then be consumed by a linux-lrm
> package which will produce the same reproducible build pieces (unlinked)
> and incorporate the associated signature.  Later when installed the .kos
> can be linked and that signature applied so they are loadable under
> signing.
> 
> Proposing for application to disco.

Applied to disco/master-next and unstable/master, thanks!