From: Dave Airlie <airlied@xxxxxxxxxx>
redhat: add nvidia oot signing key
This adds the nvidia out-of-tree signing key to the RHEL kernels,
this key will be used to sign nvidia out-of-tree drivers for RHEL.
Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>
diff --git a/redhat/Makefile b/redhat/Makefile
index blahblah..blahblah 100644
--- a/redhat/Makefile
+++ b/redhat/Makefile
@@ -681,6 +681,7 @@ sources-rh: $(TARBALL) generate-testpatch-tmp setup-source dist-configs-check
scripts/gating/rpminspect.yaml > $(SOURCES)/rpminspect.yaml
@cp scripts/kernel-tools/kvm_stat.logrotate \
keys/rhel*.x509 \
+ keys/nvidia*.x509 \
kabi/check-kabi \
configs/$(SPECPACKAGE_NAME)-*.config \
configs/partial*.config \
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -935,6 +935,7 @@ Source87: flavors
Source100: rheldup3.x509
Source101: rhelkpatch1.x509
+Source102: nvidiagpuoot001.x509
Source200: check-kabi
@@ -1879,7 +1880,8 @@ done
%if %{signkernel}%{signmodules}
openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem
openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem
-cat rheldup3.pem rhelkpatch1.pem > ../certs/rhel.pem
+openssl x509 -inform der -in %{SOURCE102} -out nvidiagpuoot001.pem
+cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem > ../certs/rhel.pem
%ifarch s390x ppc64le
openssl x509 -inform der -in %{secureboot_ca_0} -out secureboot.pem
cat secureboot.pem >> ../certs/rhel.pem
diff --git a/redhat/keys/nvidiagpuoot001.x509 b/redhat/keys/nvidiagpuoot001.x509
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/keys/nvidiagpuoot001.x509
Binary files /dev/null and b/redhat/keys/nvidiagpuoot001.x509 differ
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2936
--
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
