ACK/Cmnt: [SRU][B][F][H][I][UNSTABLE][PATCH] UBUNTU: [Packaging] Add system trusted and revocation keys final check

[Tim Gardner]

Acked-by: Tim Gardner <tim.gardner at canonical.com>

You have so little faith in your fellow derivative kernel developers :)

On 10/13/21 10:20 AM, Dimitri John Ledkov wrote:
> If certificates are packaged, the config keys to use them must be
> enabled otherwise boot testing will fail. This check ensures early
> detection of incorrect configuration when rebasing derivative kernels.
> 
> The patch is identical for all series, but applies with fuzz, hence
> sending three patches which apply cleanly on bionic; focal & hirsute;
> impish & unstable.
> 
> This has no end-user effect as the final-checks are performed during
> build and by cranky close when preparing kernels. It is a safety net
> to prevent incorrect kernel rebases due to lax derivative config
> enforements. (missing parent config includes, missing enforce, missing
> do enforce all, mismatch in config include versions)
> 
> Dimitri John Ledkov (1):
>    UBUNTU: [Packaging] Add system trusted and revocation keys final check
> 
>   debian/scripts/misc/final-checks | 12 ++++++++++++
>   1 file changed, 12 insertions(+)
> 

-- 
-----------
Tim Gardner
Canonical, Inc