github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-09-03 18:04:16 +00:00
Code Issues Projects Releases Wiki Activity

gpu: Add proper config for module signing

Browse Source 
We want to enable module signing in Kata and Coco

Signed-off-by: Zvonko Kaiser <zkaiser@nvidia.com>
This commit is contained in:
Zvonko Kaiser
2025-02-12 01:04:27 +00:00
parent f485e52f75
commit bc8360e8a9
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tools/packaging/kernel/configs/fragments/gpu/nvidia.x86_64.conf.in
View File

@@ -7,9 +7,6 @@ CONFIG_PCI_MMCONFIG=y
CONFIG_MODULES=y CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_UNLOAD=y
# CRYPTO_FIPS requires this config when loading modules is enabled.
CONFIG_MODULE_SIG=y
# Linux kernel version suffix # Linux kernel version suffix
CONFIG_LOCALVERSION="-nvidia-gpu${CONF_GUEST_SUFFIX}" CONFIG_LOCALVERSION="-nvidia-gpu${CONF_GUEST_SUFFIX}"
@@ -25,3 +22,11 @@ CONFIG_X86_PAT=y
CONFIG_CRYPTO_ECC=y CONFIG_CRYPTO_ECC=y
CONFIG_CRYPTO_ECDH=y CONFIG_CRYPTO_ECDH=y
CONFIG_CRYPTO_ECDSA=y CONFIG_CRYPTO_ECDSA=y
# Module signing
CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_FORCE=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA512=y
CONFIG_SYSTEM_TRUSTED_KEYS=""
CONFIG_SYSTEM_TRUSTED_KEYRING=y