APPLIED[U]: [SRU][B][F][H][I][UNSTABLE][PATCH] UBUNTU: [Packaging] Add system trusted and revocation keys final check

[Andrea Righi]

On Wed, Oct 13, 2021 at 05:20:36PM +0100, Dimitri John Ledkov wrote:
> If certificates are packaged, the config keys to use them must be
> enabled otherwise boot testing will fail. This check ensures early
> detection of incorrect configuration when rebasing derivative kernels.
> 
> The patch is identical for all series, but applies with fuzz, hence
> sending three patches which apply cleanly on bionic; focal & hirsute;
> impish & unstable.
> 
> This has no end-user effect as the final-checks are performed during
> build and by cranky close when preparing kernels. It is a safety net
> to prevent incorrect kernel rebases due to lax derivative config
> enforements. (missing parent config includes, missing enforce, missing
> do enforce all, mismatch in config include versions)

Applied to unstable/5.15.

Thanks,
-Andrea