wunker-bunker/wunker-os
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Implement kernel signing

Browse Source
This commit is contained in:
Gerald Pinder
2025-09-09 21:05:02 -04:00
parent 851b1c048e
commit 756653ae99
16 changed files with 200 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
files/scripts/signmodules.sh
View File

@@ -23,13 +23,12 @@ fi
KERNEL_VERSION="$(rpm -q "kernel" --queryformat '%{VERSION}-%{RELEASE}.%{ARCH}')"
PUBLIC_KEY_DER_PATH="../system/etc/pki/akmods/certs/akmods-secureblue.der"
PUBLIC_KEY_CRT_PATH="./certs/public_key.crt"
PUBLIC_KEY_CRT_PATH="/tmp/certs/public_key.crt"
PRIVATE_KEY_PATH="/tmp/certs/private_key.priv"
openssl x509 -in "$PUBLIC_KEY_DER_PATH" -out "$PUBLIC_KEY_CRT_PATH"
PRIVATE_KEY_PATH="/tmp/certs/private_key.priv"
SIGNING_KEY="./certs/signing_key.pem"
SIGNING_KEY="/tmp/certs/signing_key.pem"
cat "$PRIVATE_KEY_PATH" <(echo) "$PUBLIC_KEY_CRT_PATH" >> "$SIGNING_KEY"
for module in /usr/lib/modules/"${KERNEL_VERSION}"/extra/"${MODULE_NAME}"/*.ko*; do