Hi Phil, On Tue, Jun 07, 2022 at 12:04:13PM +0100, Phil Elwell wrote: > A clean 5.15.45 boots cleanly, whereas a downstream kernel shows the static key > warning (but it does go on to boot). The significant difference is that our > defconfigs set CONFIG_RANDOM_TRUST_BOOTLOADER=y - defining that on top of > multi_v7_defconfig demonstrates the issue on a clean 5.15.45. Conversely, not > setting that option in a downstream kernel build avoids the warning Ah, that makes sense. Note that I've got a patch out for changing that defconfig as well to be Y, which means the CI will catch this sort of thing in the future. Jason
