Skip to content

Commit

Permalink
Remove obsolete part of README
Browse files Browse the repository at this point in the history
Getting tarball hash is not needed anymore, qubesbuilderv2 takes care of
git tag verification.
  • Loading branch information
marmarek committed Jan 13, 2025
1 parent dfcb777 commit 8b0e169
Showing 1 changed file with 1 addition and 15 deletions.
16 changes: 1 addition & 15 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,18 +5,4 @@ Building release candidate kernels
----------------------------------

1. Write kernel version into `version` file, for example 6.0-rc7.
2. Write hash of `linux-*.tar` file (the uncompressed source tarball) into `linux-*.tar.sha256` file.
3. Comment out "normal" tarball section in `.qubesbuilder` and uncomment the one for rc kernel.


As for getting the trustworthy tarball hash, it can be via signed git tag:

```
version=6.0-rc7
git clone -n --depth=1 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git -b v$version linux-rc
cd linux-rc
git verify-tag v$version
# should be signed by Linus, you can find key in kernel.org-1-key.asc
git archive --prefix=linux-$version/ v$version | sha256sum
```

2. Comment out "normal" tarball section in `.qubesbuilder` and uncomment the one for rc kernel.

0 comments on commit 8b0e169

Please sign in to comment.