ACK: [SRU][B][F][H][I][UNSTABLE][PATCH] UBUNTU: [Packaging] Add system trusted and revocation keys final check
kleber.souza at canonical.com
Thu Oct 14 15:50:21 UTC 2021
On 13.10.21 18:20, Dimitri John Ledkov wrote:
> If certificates are packaged, the config keys to use them must be
> enabled otherwise boot testing will fail. This check ensures early
> detection of incorrect configuration when rebasing derivative kernels.
> The patch is identical for all series, but applies with fuzz, hence
> sending three patches which apply cleanly on bionic; focal & hirsute;
> impish & unstable.
> This has no end-user effect as the final-checks are performed during
> build and by cranky close when preparing kernels. It is a safety net
> to prevent incorrect kernel rebases due to lax derivative config
> enforements. (missing parent config includes, missing enforce, missing
> do enforce all, mismatch in config include versions)
> Dimitri John Ledkov (1):
> UBUNTU: [Packaging] Add system trusted and revocation keys final check
> debian/scripts/misc/final-checks | 12 ++++++++++++
> 1 file changed, 12 insertions(+)
Thanks Dimitri for the bug report :-).
Acked-by: Kleber Sacilotto de Souza <kleber.souza at canonical.com>
More information about the kernel-team