APPLIED[U]: Re: [Plucky/Unstable PATCH] UBUNTU: [Packaging] avoid arch-specific certificate creation

Paolo Pisati paolo.pisati at canonical.com
Mon Nov 25 14:44:12 UTC 2024


On Mon, Nov 25, 2024 at 07:07:21PM +0900, Masahiro Yamada wrote:
> Currently, the debian/canonical-(revoked-)certs.pem files are generated
> by the clean target and included in the source package.
> 
> These files are created by concatenating *-all.pem and *-$(arch).pem
> files.
> 
> When creating a source package, $(arch) expands to the architecture of
> the build machine.
> 
> Although it is unclear whether arch-specific certificates have ever
> been used, if they were, canonical-(revoked-)certs.pem would become
> architecture-specific, resulting in an architecture-dependent source
> package.
> 
> The source package should be consistent, regardless of the architecture
> of the build machine.
> 
> This commit changes the build rules to concatenate all *.pem files,
> ensuring the output is independent of the build machine architecture.
> 
> Signed-off-by: Masahiro Yamada <masahiro.yamada at canonical.com>

Applied.
-- 
bye,
p.



More information about the kernel-team mailing list