UBUNTU: [Packaging] signing -- add support for signing Opal kernel binaries

BugLink: http://bugs.launchpad.net/bugs/1696154
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Seth Forshee <seth.forshee@canonical.com>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>

diff --git a/debian/rules b/debian/rules
index 0fc6af03536127542749560593e4d7c173f21b0e..fd3397c67996296dd9b7a63fdc1a9b10fe0cb425 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -46,7 +46,7 @@ ifneq ($(DEB_HOST_ARCH),$(DEB_BUILD_ARCH))
 endif
 
 # Are any of the kernel signing options enabled.
-any_signed=$(sort $(filter-out false,$(uefi_signed)))
+any_signed=$(sort $(filter-out false,$(uefi_signed) $(opal_signed)))
 ifeq ($(any_signed),true)
 bin_pkg_name=$(bin_pkg_name_unsigned)
 else

diff --git a/debian/rules.d/2-binary-arch.mk b/debian/rules.d/2-binary-arch.mk
index f550d84f508298091b180803a7f20e76f3d1f75b..561c5b3eac9b3b41df27e514c2f22591c7abd4ee 100644 (file)
--- a/debian/rules.d/2-binary-arch.mk
+++ b/debian/rules.d/2-binary-arch.mk
@@ -152,6 +152,11 @@ ifeq ($(uefi_signed),true)
                        $(signingv)/$(instfile)-$(abi_release)-$*.efi; \
        fi
 endif
+ifeq ($(opal_signed),true)
+       install -d $(signingv)
+       cp -p $(pkgdir_bin)/boot/$(instfile)-$(abi_release)-$* \
+               $(signingv)/$(instfile)-$(abi_release)-$*.opal;
+endif
 
        install -d $(pkgdir)/boot
        install -m644 $(builddir)/build-$*/.config \