UBUNTU: [Packaging] signing -- add support for signing Opal kernel binaries

BugLink: http://bugs.launchpad.net/bugs/1764794
OldBugLink: http://bugs.launchpad.net/bugs/1696154Signed-off-by: Andy Whitcroft <apw@canonical.com>
Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Seth Forshee <seth.forshee@canonical.com>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

debian/rules

@@ -44,7 +44,7 @@ ifneq ($(DEB_HOST_ARCH),$(DEB_BUILD_ARCH))
 endif
 
 # Are any of the kernel signing options enabled.
-any_signed=$(sort $(filter-out false,$(uefi_signed)))
+any_signed=$(sort $(filter-out false,$(uefi_signed) $(opal_signed)))
 ifeq ($(any_signed),true)
 bin_pkg_name=$(bin_pkg_name_unsigned)
 else

debian/rules.d/2-binary-arch.mk

@@ -152,6 +152,11 @@ ifeq ($(uefi_signed),true)
 			$(signingv)/$(instfile)-$(abi_release)-$*.efi; \
 	fi
 endif
+ifeq ($(opal_signed),true)
+	install -d $(signingv)
+	cp -p $(pkgdir_bin)/boot/$(instfile)-$(abi_release)-$* \
+		$(signingv)/$(instfile)-$(abi_release)-$*.opal;
+endif
 
 	install -d $(pkgdir)/boot
 	install -m644 $(builddir)/build-$*/.config \