NAS-140773 / 27.0.0-BETA.1 / Add TrueNAS signing cert to kernel trusted keys

[ixhamza]

Add the TrueNAS SCALE Signing Key to .builtin_trusted_keys so OOT modules (openzfs, scst) signed by our signing infrastructure verify under Secure Boot + lockdown.

Testing

root@truenas[~]# dmesg | grep -i "Loaded X.509"
[    0.227730] Loaded X.509 cert 'Build time autogenerated kernel key: ea518bd20673bd4316146057597ff350063da6b7'
[    0.228001] Loaded X.509 cert 'TrueNAS SCALE Signing Key: defc6ebf66ad1e53ccfa7162de16d9b3fc3a7f14'
root@truenas[~]# keyctl show %:.builtin_trusted_keys
Keyring
 946931825 ---lswrv      0     0  keyring: .builtin_trusted_keys
 718903444 ---lswrv      0     0   \_ asymmetric: Build time autogenerated kernel key: ea518bd20673bd4316146057597ff350063da6b7
 102292968 ---lswrv      0     0   \_ asymmetric: TrueNAS SCALE Signing Key: defc6ebf66ad1e53ccfa7162de16d9b3fc3a7f14

[bugclerk]

Jira URL: https://ixsystems.atlassian.net/browse/NAS-140773

[ixhamza]

time 1:00

[bugclerk]

This PR has been merged and conversations have been locked.
If you would like to discuss more about this issue please use our forums or raise a Jira ticket.