Hi, how are kernel modules supposed to be signed? I looked at the src:linux-signed_5 source package and it calls a program from linux-kbuild-${version} (/usr/lib/linux-kbuild-*/scripts/sign-file). Does this mean that the system signing kernel modules has to execute binaries from the upload to generate the signatures? linux-kbuild-* is built from src:linux just like the kernel modules to be signed. Ansgar