New UKI having kernel 6.18 fails to be signed by sb-signer

[starnight]

The CI fails to sign the new built UKI of kernel 6.18 and shows error:

Failure Summary
    signing/payg/signed-uki-endless.bst:
    [00:00:00][][   build:signing/payg/signed-uki-endless.bst] FAILURE Failed to contact secure boot signing service at https://sb-signer.endlessm-sf.com/

        413 Client Error: Request Entity Too Large for url: https://sb-signer.endlessm-sf.com/api/sign

        Printing the last 20 lines from log file:
        /home/runner/.cache/buildstream/logs/endlessos/signing-payg-signed-uki-endless/-build.20260305-145123.log
        ======================================================================
            TZ: UTC
            SOURCE_DATE_EPOCH: 1321009871
            CFLAGS: '-O2 -pipe -g -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
            CXXFLAGS: '-O2 -pipe -g -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
            LDFLAGS: '-Wl,-z,relro,-z,now -Wl,--as-needed '
            RUSTFLAGS: '-Cforce-frame-pointers=yes -C debuginfo=2 '
            CGO_CFLAGS: '-O2 -pipe -g -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
            CGO_CXXFLAGS: '-O2 -pipe -g -Wp,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
            CGO_LDFLAGS: '-Wl,-z,relro,-z,now -Wl,--as-needed '
        [--:--:--] STATUS  [] eos/payg/uki.bst: Staging eos/payg/uki.bst/
        [--:--:--] LOG     [] signing/payg/signed-uki-endless.bst: Reading input binary in sandbox: usr/share/efi_binaries_payg/payg-image.efi
        [--:--:--] LOG     [] signing/payg/signed-uki-endless.bst: Reading private key from host file files/apitrustedkey.gpg
        [--:--:--] INFO    [] signing/payg/signed-uki-endless.bst: Loaded private key with fingerprint 00EA12D9A37DD2A7BD810643DFB958DC725AE7CA
        [--:--:--] LOG     [] signing/payg/signed-uki-endless.bst: Creating signature
        [--:--:--] INFO    [] signing/payg/signed-uki-endless.bst: Sending POST request to signer service at https://sb-signer.endlessm-sf.com/api/sign
        [--:--:--] START   [] signing/payg/signed-uki-endless.bst: Caching artifact
        [00:00:00] SUCCESS [] signing/payg/signed-uki-endless.bst: Caching artifact
        [00:00:00] FAILURE [] signing/payg/signed-uki-endless.bst: Failed to contact secure boot signing service at https://sb-signer.endlessm-sf.com/

            413 Client Error: Request Entity Too Large for url: https://sb-signer.endlessm-sf.com/api/sign
        ======================================================================

[starnight]

Check the EOS kernel 6.18 & 6.14's file sizes:

$ ls -lh /boot/ostree/*
/boot/ostree/eos-37dd2e1823af805903fdea6876e9e6c48870339cfaba3fd6fb9b3e0a3a8740f7:
total 96M
-rw------- 3 root root 80M Jan  1  1970 initramfs-6.18.0-9-generic.img
-rw------- 3 root root 16M Jan  1  1970 vmlinuz-6.18.0-9-generic

/boot/ostree/eos-4e1acd94cdb06f7333e099a2e9977fe5be138d054205a3be953f9d2e27aac334:
total 90M
-rw------- 1 root root 75M Mar 10 18:12 initramfs-6.14.0-17-generic.img
-rw------- 1 root root 15M Mar 10 18:12 vmlinuz-6.14.0-17-generic

[starnight]

Here is the kernel build config diff between EOS kernel 6.14 and 6.18: kernel-config-diff.txt

@dsd Seems CONFIG_DEBUG_INFO and related options are the same.

[dsd]

OK, if its just a few mb as you show there then let's just increase the limit.