From the kernel `make nconfig` description: ``` Module signature verification (MODULE_SIG)
CONFIG_MODULE_SIG: Check modules for valid signatures upon load: the signature is simply appended to the module. For more information see <file:Documentation/admin-guide/module-signing.rst>. Note that this option adds the OpenSSL development packages as a kernel build dependency so that the signing tool can use its crypto library. ``` This patch adds the missing build dependency. Best regards, Andrew diff --git a/eclass/kernel-build.eclass b/eclass/kernel-build.eclass index 276a08a104e0..3bcb345a0c9b 100644 --- a/eclass/kernel-build.eclass +++ b/eclass/kernel-build.eclass @@ -92,6 +92,9 @@ IUSE="+strip" if [[ ${KERNEL_IUSE_MODULES_SIGN} ]]; then IUSE+=" modules-sign" REQUIRED_USE="secureboot? ( modules-sign )" + BDEPEND+=" + modules-sign? ( dev-libs/openssl ) + " fi # @FUNCTION: kernel-build_pkg_setup