[5.10][Feature]KEYS: Support for inserting a certificate into x86 bzImage · Pull Request !2202 · anolis/cloud-kernel

bugzilla:https://bugzilla.openanolis.cn/show_bug.cgi?id=6623

The config option SYSTEM_EXTRA_CERTIFICATE (introduced in [c4c3610](https://github.com/torvalds/linux/commit/c4c36105958576fee87d2c75f4b69b6e5bbde772))
reserves space in vmlinux file, which is compressed to create the
self-extracting bzImage. This patch adds the capability of extracting the
vmlinux, inserting the certificate, and repackaging the result into a
bzImage.

It only works if the resulting compressed vmlinux is smaller than the
original. Otherwise re-linking would be required. To make the reserved
space allocate actual space in bzImage, incompressible bytes are
inserted into the vmlinux as a placeholder for the extra certificate.
After receiving a bzImage that is created this way, the actual
certificate can be inserted into the bzImage:

scripts/insert-sys-cert -s <System.map> -z <bzImage> -c <certfile>

Merge from Oracle
https://github.com/oracle/linux-uek/commit/9e34bb246f72e5448a294c488aa3140e22dedcaf
https://github.com/oracle/linux-uek/commit/818c0343a57d1007a1636fc466b376599c411a3a
https://github.com/oracle/linux-uek/commit/62cadd654c2f1cd2959d8880d085611b682ec0e0

类型	指派人员	状态
审查	Tianjia Zhang	进行中 (0/1人)
测试	小龙	进行中 (0/1人)

GVPanolis/cloud-kernel

搜索帮助

GVP anolis/cloud-kernel