Fix signing for driver versions that have prebuilt modules
For driver versions with prebuilt modules available, we will still be
supporting installation using precompiled drivers to support old device
types. This will require signatures for those drivers.
Short circuit the prebuilt driver module installation if the unsigned
driver is allowed - which is only used in the dev/testing/signing.
Change-Id: I2a4f18a0b0cf40d182f6d06700c4ee29269d7180
Reviewed-on: https://cos-review.googlesource.com/c/cos/tools/+/43759
Tested-by: Arnav Kansal <rnv@google.com>
Reviewed-by: Meena Shanmugam <meenashanmugam@google.com>
Cloud-Build: GCB Service account <228075978874@cloudbuild.gserviceaccount.com>
diff --git a/src/cmd/cos_gpu_installer/internal/commands/install.go b/src/cmd/cos_gpu_installer/internal/commands/install.go
index e85ea7f..c8263d1 100644
--- a/src/cmd/cos_gpu_installer/internal/commands/install.go
+++ b/src/cmd/cos_gpu_installer/internal/commands/install.go
@@ -265,7 +265,7 @@
log.V(2).Info("Did not find cached version, installing the drivers...")
// install OSS kernel modules (if available) if device supports
- if gpuType.OpenSupported() {
+ if !c.unsignedDriver && gpuType.OpenSupported() {
c.kernelOpen = gpuType.OpenSupported()
}
