We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 4844660 commit 003b2ceCopy full SHA for 003b2ce
sign-kernel.sh
@@ -20,8 +20,7 @@ fi
20
if [[ "${PRIVKEY}" == /* ]]; then
21
PRIVKEY_PATH="${PRIVKEY}"
22
else
23
- PRIVKEY_PATH="/etc/pki/kernel/private/private_key.priv"
24
- mkdir -p "$(dirname "$PRIVKEY_PATH")"
+ PRIVKEY_PATH="/tmp/private_key.priv"
25
if [[ "${PRIVKEY}" == ./* ]]; then
26
cp "${PRIVKEY}" "${PRIVKEY_PATH}"
27
elif [[ "${PRIVKEY}" == http* ]]; then
@@ -62,6 +61,7 @@ if [[ "${STRIP}" == true ]]; then
62
61
fi
63
64
sbsign --cert $CRT_PATH --key $PRIVKEY_PATH /usr/lib/modules/$kernel_version/vmlinuz --output /usr/lib/modules/$kernel_version/vmlinuz
+rm -rf $PRIVKEY_PATH
65
sbverify --list /usr/lib/modules/$kernel_version/vmlinuz
66
67
if command -v ostree; then
0 commit comments