From fa7e9e6a6d7427398a7a93caec12dd1f576b2fe3 Mon Sep 17 00:00:00 2001
From: Neal Gompa <ngompa@centosproject.org>
Date: Dec 12 2021 23:08:38 +0000
Subject: Do not sign the kernel or modules for now


The capability to do this is not yet available...

Reference: https://pagure.io/centos-infra/issue/307
Reference: https://git.centos.org/centos/board/issue/67

---

diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index cfadf41..b47a31d 100755
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -103,6 +103,14 @@ Summary: The Linux kernel
 # Sign modules on all arches
 %global signmodules 1
 
+%if 0%{?centos_hs}
+# We cannot do signing for secure boot yet...
+# Cf. https://pagure.io/centos-infra/issue/307
+# Cf. https://git.centos.org/centos/board/issue/67
+%global signkernel 0
+%global signmodules 0
+%endif
+
 # Compress modules only for architectures that build modules
 %ifarch noarch
 %global zipmodules 0
@@ -637,8 +645,8 @@ BuildConflicts: dwarves < 1.13
 BuildRequires: kabi-dw
 %endif
 
-%if %{signkernel}%{signmodules}
 BuildRequires: openssl openssl-devel
+%if %{signkernel}%{signmodules}
 %if %{signkernel}
 %ifarch x86_64 aarch64
 BuildRequires: nss-tools