APPLIED[B/F/H/I]/cmnt: [SRU][B][F][H][I][UNSTABLE][PATCH] UBUNTU: [Packaging] Add system trusted and revocation keys final check

[Kleber Souza]

On 13.10.21 18:20, Dimitri John Ledkov wrote:
> If certificates are packaged, the config keys to use them must be
> enabled otherwise boot testing will fail. This check ensures early
> detection of incorrect configuration when rebasing derivative kernels.
> 
> The patch is identical for all series, but applies with fuzz, hence
> sending three patches which apply cleanly on bionic; focal & hirsute;
> impish & unstable.
> 
> This has no end-user effect as the final-checks are performed during
> build and by cranky close when preparing kernels. It is a safety net
> to prevent incorrect kernel rebases due to lax derivative config
> enforements. (missing parent config includes, missing enforce, missing
> do enforce all, mismatch in config include versions)
> 
> Dimitri John Ledkov (1):
>    UBUNTU: [Packaging] Add system trusted and revocation keys final check
> 
>   debian/scripts/misc/final-checks | 12 ++++++++++++
>   1 file changed, 12 insertions(+)
> 

Applied to {bionic,focal,hirsute,impish}:linux with a BugLink added.

Thanks,
Kleber