Files
scst/scripts/sign-modules
T
Gleb Chesnokov 5cc6d87b7b scripts: Fix helper edge cases
Propagate patch and module-list failures, normalize the script
directory, and expand the actual Mercurial subrepository name when
matching paths. Keep the existing no-optional-patches behavior
unchanged.
2026-08-21 19:58:59 +03:00

29 lines
913 B
Bash
Executable File

#!/bin/bash
set -o pipefail
# Parse modules.order and sign the modules found in that file.
if [ -z "$KDIR" ]; then
echo "Error: \$KDIR has not been set"
exit 1
fi
scst_dir=$(dirname "$(cd "$(dirname "$0")" && pwd)")
if [ ! -e "${KDIR}/scripts/sign-file" ]; then
echo "Not signing modules because no sign-file executable"
exit
fi
[ -e "${scst_dir}/scst/src/certs/scst_module_key.priv" ] || exit 0
[ -e "${scst_dir}/scst/src/certs/scst_module_key.der" ] || exit 0
CONFIG_MODULE_SIG_HASH=$(sed -n 's/^CONFIG_MODULE_SIG_HASH="\([^"]*\)"$/\1/p' "${KDIR}/.config" | { read -r line; [ -n "$line" ] && echo "$line" || echo sha256; })
sed 's,^kernel/,,' < modules.order | \
while read -r f; do
echo "Signing $f"
"${KDIR}/scripts/sign-file" "${CONFIG_MODULE_SIG_HASH}" "${scst_dir}/scst/src/certs/scst_module_key.priv" "${scst_dir}/scst/src/certs/scst_module_key.der" "$f" || exit $?
done