Re: [PATCHv2] sign-file,extract-cert: use KBUILD_SIGN_PIN in provider mode

[James Bottomley]

On Wed, 2026-03-18 at 10:02 +0100, Anton Lundin wrote:
> This adds support for the documented KBUILD_SIGN_PIN functionality to
> sign-file and extract-cert when built with USE_PKCS11_PROVIDER.

Why would you do this?  It's going to pop up a prompt for a password
for every module you have ... that can be hundreds to thousands in a
distribution kernel, so it's unscalable.  The usual way we do this is
to put the password into an environment variable (insecure but
scalable) but I suppose if you have a more secure solution there might
be interest.

Regards,

James