[gentoo-dev] [PATCH 5/5]: kernel-build.eclass: require modules-sign if secureboot

[Andrew Ammerlaan]

From d528f87cb015cc60ef6f702d02d20b4f1fc42e74 Mon Sep 17 00:00:00 2001
From: Andrew Ammerlaan <andrewammerl...@gentoo.org>
Date: Thu, 13 Jul 2023 09:55:32 +0200
Subject: [PATCH 05/13] kernel-build.eclass: require modules-sign if 
secureboot

Signed-off-by: Andrew Ammerlaan <andrewammerl...@gentoo.org>
---
 eclass/kernel-build.eclass | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/eclass/kernel-build.eclass b/eclass/kernel-build.eclass
index 0c8eaf3c1cd5..c9f18a1f0c4f 100644
--- a/eclass/kernel-build.eclass
+++ b/eclass/kernel-build.eclass
@@ -29,6 +29,11 @@ if [[ ! ${_KERNEL_BUILD_ECLASS} ]]; then
 _KERNEL_BUILD_ECLASS=1

 PYTHON_COMPAT=( python3_{10..12} )
+if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
+       # If we have enabled module signing IUSE
+       # then we can also enable secureboot IUSE
+       KERNEL_IUSE_SECUREBOOT=1
+fi

 inherit multiprocessing python-any-r1 savedconfig toolchain-funcs 
kernel-install

@@ -86,8 +91,19 @@ IUSE="+strip"

 if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
        IUSE+=" modules-sign"
+       REQUIRED_USE="secureboot? ( modules-sign )"
 fi

+# @FUNCTION: kernel-build_pkg_setup
+# @DESCRIPTION:
+# Call python-any-r1 and secureboot pkg_setup
+kernel-build_pkg_setup() {
+       python-any-r1_pkg_setup
+       if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then
+               secureboot_pkg_setup
+       fi
+}
+
 # @FUNCTION: kernel-build_src_configure
 # @DESCRIPTION:
 # Prepare the toolchain for building the kernel, get the default .config
@@ -395,4 +411,4 @@ kernel-build_merge_configs() {

 fi

-EXPORT_FUNCTIONS src_configure src_compile src_test src_install 
pkg_postinst
+EXPORT_FUNCTIONS src_configure src_compile src_test src_install 
pkg_postinst pkg_setup
--
2.41.0