On 07.06.24 08:04, Thorsten Leemhuis wrote: > On 06.06.24 17:47, Justin Forbes wrote: >> On Thu, Jun 6, 2024 at 9:19 AM Thorsten Leemhuis <fedora@xxxxxxxxxxxxx> wrote: >>> On 04.06.24 18:12, Mikhail Gavrilov wrote: >>> >>>> Instruction [1] about building upstream kernel should be updated, >>> I'd tend to disagree. I think the root of the problem should be fixed, >>> which you... >>> >>>> because since commit 5e6abd7f4dce [2] the Fedora kernel config contain >>>> CONFIG_SYSTEM_TRUSTED_KEYS="certs/rhel.pem" >>> >>> ...describe here. That's because other people will run into the problem >>> elsewhere then using localmodconfig and such -- like it is the case for >>> Debian already: >>> https://docs.kernel.org/admin-guide/quickly-build-trimmed-linux.html#configmods-distros >>> >>> Did anyone report this to kernel-ark already? Or checked with kernel-ark >>> commit caused this? >> >> The docs are what should be updated. > > Why not do something like "sed -i > s!CONFIG_SYSTEM_TRUSTED_KEYS="certs/rhel.pem!# > CONFIG_SYSTEM_TRUSTED_KEYS is not set" in the %install section (or > somewhere else once the kernel was built and the .config put aside for > shipping) to ensure things like "make localmodconfig" and "make > olddefconfig" work when using the .config from Fedora's kernel as a base > (among others for bisecting a upstream bug). > > Alternatively: why not ship that file properly in some package that > becomes a Requirement? Then things would work for everyone doing the > above, too. Hmm, no reply here. So I put those ideas into a ticket now, maybe I get a reaction there: https://gitlab.com/cki-project/kernel-ark/-/issues/158 Ciao, Thorsten -- _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
