From cee4d89e97171daec020ce3e74c0b289e485950e Mon Sep 17 00:00:00 2001
From: Michal Suchanek <msuchanek@suse.de>
Date: Mar 08 2023 10:36:15 +0000
Subject: Do not sign the vanilla kernel (bsc#1209008).


Signed-off-by: Michal Suchanek <msuchanek@suse.de>

---

diff --git a/rpm/kernel-binary.spec.in b/rpm/kernel-binary.spec.in
index a918276..fee0a0a 100644
--- a/rpm/kernel-binary.spec.in
+++ b/rpm/kernel-binary.spec.in
@@ -723,6 +723,10 @@ export BRP_PESIGN_FILES
 %if "%{compress_modules}" != "none"
 export BRP_PESIGN_COMPRESS_MODULE=%{compress_modules}
 %endif
+# Do not sign vanilla kernels released in official projects
+%if %build_vanilla && ! %vanilla_only
+BRP_PESIGN_FILES=""
+%endif
 
 if test -x /usr/lib/rpm/pesign/gen-hmac; then
 	$_ -r %buildroot /boot/%image-%kernelrelease-%build_flavor