14107dc511
the signed template together with the binary package(s) containing the unsigned files form the input to our secure boot signing service. the signed template consists of - files.json (specifying which files are signed how and by which key) - packaging template used to build the signed package(s) the signing service - extracts and checks the signed-template binary package - extracts the unsigned package(s) - signs the needed files - packs up the signatures + the template contained in the signed-template package into the signed source package the signed source package can then be built in the regular fashion (in case of the kernel packages, it will copy the kernel image, modules and some helper files from the unsigned package, attach the signature created by the signing service, and re-pack the result as signed-kernel package). Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
101 lines
3.2 KiB
Plaintext
101 lines
3.2 KiB
Plaintext
Source: pve-kernel
|
|
Section: devel
|
|
Priority: optional
|
|
Maintainer: Proxmox Support Team <support@proxmox.com>
|
|
Build-Depends: asciidoc-base,
|
|
automake,
|
|
bc,
|
|
bison,
|
|
cpio,
|
|
debhelper (>= 10~),
|
|
dh-python,
|
|
dwarves,
|
|
file,
|
|
flex,
|
|
gcc (>= 8.3.0-6),
|
|
git,
|
|
kmod,
|
|
libdw-dev,
|
|
libelf-dev,
|
|
libiberty-dev,
|
|
libnuma-dev,
|
|
libpve-common-perl,
|
|
libslang2-dev,
|
|
libssl-dev,
|
|
libtool,
|
|
lintian,
|
|
lz4,
|
|
perl-modules,
|
|
python3-minimal,
|
|
rsync,
|
|
sed,
|
|
sphinx-common,
|
|
tar,
|
|
xmlto,
|
|
zlib1g-dev,
|
|
zstd,
|
|
Build-Conflicts: pve-headers-@KVNAME@
|
|
Vcs-Git: git://git.proxmox.com/git/pve-kernel
|
|
Vcs-Browser: https://git.proxmox.com/?p=pve-kernel.git
|
|
|
|
Package: linux-tools-@KVMAJMIN@
|
|
Architecture: any
|
|
Section: devel
|
|
Priority: optional
|
|
Depends: linux-base, ${misc:Depends}, ${shlibs:Depends}
|
|
Description: Linux kernel version specific tools for version @KVMAJMIN@
|
|
This package provides the architecture dependent parts for kernel
|
|
version locked tools (such as perf and x86_energy_perf_policy)
|
|
|
|
Package: pve-headers-@KVNAME@
|
|
Section: devel
|
|
Priority: optional
|
|
Architecture: any
|
|
Provides: linux-headers-@KVNAME@-amd64
|
|
Depends: coreutils | fileutils (>= 4.0)
|
|
Description: Proxmox Kernel Headers
|
|
This package contains the linux kernel headers
|
|
|
|
Package: pve-kernel-@KVNAME@
|
|
Section: admin
|
|
Priority: optional
|
|
Architecture: any
|
|
Provides: linux-image-@KVNAME@-amd64
|
|
Suggests: pve-firmware
|
|
Depends: busybox, initramfs-tools | linux-initramfs-tool
|
|
Recommends: grub-pc | grub-efi-amd64 | grub-efi-ia32 | grub-efi-arm64
|
|
Description: Proxmox Kernel Image
|
|
This package contains the linux kernel and initial ramdisk used for booting
|
|
|
|
Package: pve-kernel-@KVNAME@-dbgsym
|
|
Architecture: any
|
|
Provides: linux-debug
|
|
Section: devel
|
|
Priority: optional
|
|
Build-Profiles: <pkg.pve-kernel.debug>
|
|
Description: Proxmox Kernel debug image
|
|
This package provides the kernel debug image for version @KVNAME@. The debug
|
|
kernel image contained in this package is NOT meant to boot from - it is
|
|
uncompressed, and unstripped, and suitable for use with crash/kdump-tools/..
|
|
to analyze kernel crashes. This package also contains the pve-kernel modules
|
|
in their unstripped version.
|
|
|
|
Package: pve-kernel-@KVNAME@-signed-template
|
|
Architecture: amd64
|
|
Depends: ${shlibs:Depends}, ${misc:Depends}, make | build-essential | dpkg-dev
|
|
Description: Template for signed kernel package
|
|
This package is used to control code signing by the Proxmox signing
|
|
service.
|
|
|
|
Package: pve-kernel-libc-dev
|
|
Section: devel
|
|
Priority: optional
|
|
Architecture: any
|
|
Provides: linux-libc-dev (=${binary:Version})
|
|
Conflicts: linux-libc-dev
|
|
Replaces: linux-libc-dev
|
|
Depends: ${misc:Depends}
|
|
Description: Linux support headers for userspace development
|
|
This package provides userspaces headers from the Linux kernel. These headers
|
|
are used by the installed headers for GNU libc and other system libraries.
|