[OE-core] Strip kernel modules and signatures

[Trevor Woerner]

On Fri, Aug 3, 2018 at 4:16 AM, Andre McCurdy <armccurdy at gmail.com> wrote:

> On Thu, Aug 2, 2018 at 9:54 AM, Ocampo Coronado, Omar
> <omar.ocampo.coronado at intel.com> wrote:
> > Neither 'nm' or 'readelf' provide a symbol that we can use to strip.
> > I'm having a hard time reading kernel-source/scripts/sign-file.c and
> how exactly how the sign works and what bytes are being added, so we can
> avoid stripping them.
> >
> > Looking into dracut, they simple avoid strip signed modules:
> >         From dracut.sh:1671 # strip kernel modules, but do not touch
> signed modules
> >
> > Perhaps we can do the same as dracut within meta/lib/oe/package.py.
>
> Some more information here:
>
>   https://www.kernel.org/doc/html/v4.17/admin-guide/module-
> signing.html#signed-modules-and-stripping
>
>
Reading the above "between the lines", could the module be stripped /then/
signed?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20180906/582fc890/attachment-0002.html>