Public bug reported: We currently build and sign the nvidia-graphics-drivers-* packages in the main kernel package, pull off the signatures and throw away the builds. Later in LRM we build them again (builds are performed in a reproducible manner) and attach the signatures we produced in the main kernel package. While functional we have to respin the entire kernel if the nvidia version changes, which makes updates to nvidia almost impossible outside of the SRU cycle, and tricky even then.
Now that we have an Ubuntu Drivers signing key we should be using this to sign the nvidia-graphics-drivers-* .ko's. ** Affects: linux (Ubuntu) Importance: High Assignee: Andy Whitcroft (apw) Status: Incomplete ** Changed in: linux (Ubuntu) Importance: Undecided => High ** Changed in: linux (Ubuntu) Assignee: (unassigned) => Andy Whitcroft (apw) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1917034 Title: switch LRM to be signed using the Ubuntu Drivers signing key Status in linux package in Ubuntu: Incomplete Bug description: We currently build and sign the nvidia-graphics-drivers-* packages in the main kernel package, pull off the signatures and throw away the builds. Later in LRM we build them again (builds are performed in a reproducible manner) and attach the signatures we produced in the main kernel package. While functional we have to respin the entire kernel if the nvidia version changes, which makes updates to nvidia almost impossible outside of the SRU cycle, and tricky even then. Now that we have an Ubuntu Drivers signing key we should be using this to sign the nvidia-graphics-drivers-* .ko's. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1917034/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp