From 33275fa425d8debcc444d767dd1de2c12a63f067 Mon Sep 17 00:00:00 2001
From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Wed, 9 Apr 2025 16:25:49 +0200
Subject: [PATCH] mkosi: update mkosi commit reference to
 7e4ec15aee6b98300b2ee14265bc647a716a9f8a

* 7e4ec15aee Generate key-cert pair in config directory (fixes #3655)
* 5793e64958 Don't use gen_kernel_images() in run_depmod()
* bc497f1d17 Fix typing due to recent changes in typeshed
* e6a603a21a Add "plymouth" initrd profile

(cherry picked from commit c7bb07fff5cf4356e4b633cf93a460d1beb92b6e)
---
 .github/workflows/coverage.yml |  2 +-
 .github/workflows/mkosi.yml    |  2 +-
 .gitignore                     |  4 ++--
 mkosi/mkosi.conf               | 10 ++--------
 4 files changed, 6 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 0a2f3b3c6bd..56000cd6149 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-      - uses: systemd/mkosi@32105855f386c980069d134d1b0f8fea4db2129e
+      - uses: systemd/mkosi@7e4ec15aee6b98300b2ee14265bc647a716a9f8a
 
       # Freeing up disk space with rm -rf can take multiple minutes. Since we don't need the extra free space
       # immediately, we remove the files in the background. However, we first move them to a different location
diff --git a/.github/workflows/mkosi.yml b/.github/workflows/mkosi.yml
index 601f18ee9c7..1d5d4d7cb8a 100644
--- a/.github/workflows/mkosi.yml
+++ b/.github/workflows/mkosi.yml
@@ -113,7 +113,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-      - uses: systemd/mkosi@32105855f386c980069d134d1b0f8fea4db2129e
+      - uses: systemd/mkosi@7e4ec15aee6b98300b2ee14265bc647a716a9f8a
 
       # Freeing up disk space with rm -rf can take multiple minutes. Since we don't need the extra free space
       # immediately, we remove the files in the background. However, we first move them to a different location
diff --git a/.gitignore b/.gitignore
index 9eb287ec7ef..fec289e5b97 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,8 +23,8 @@ __pycache__/
 /ID
 /build*
 /install-tree
-/mkosi.key
-/mkosi.crt
+/mkosi/mkosi.key
+/mkosi/mkosi.crt
 /mkosi.tools/
 /mkosi.tools.manifest
 /mkosi/mkosi.local.conf
diff --git a/mkosi/mkosi.conf b/mkosi/mkosi.conf
index b1a0dc1addd..3d4addd855d 100644
--- a/mkosi/mkosi.conf
+++ b/mkosi/mkosi.conf
@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: LGPL-2.1-or-later
 
 [Config]
-MinimumVersion=commit:32105855f386c980069d134d1b0f8fea4db2129e
+MinimumVersion=commit:7e4ec15aee6b98300b2ee14265bc647a716a9f8a
 Dependencies=
         exitrd
         initrd
@@ -38,15 +38,11 @@ Incremental=yes
 
 [Validation]
 SignExpectedPcr=yes
-SignExpectedPcrKey=../mkosi.key
-SignExpectedPcrCertificate=../mkosi.crt
-VerityKey=../mkosi.key
-VerityCertificate=../mkosi.crt
 
 [Content]
 ExtraTrees=
         mkosi.extra.common
-        ../mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
+        mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
         %O/minimal-0.root-%a.raw:/usr/share/minimal_0.raw
         %O/minimal-0.root-%a-verity.raw:/usr/share/minimal_0.verity
         %O/minimal-0.root-%a-verity-sig.raw:/usr/share/minimal_0.verity.sig
@@ -137,8 +133,6 @@ Packages=
         zstd
 
 [Runtime]
-SshKey=../mkosi.key
-SshCertificate=../mkosi.crt
 Credentials=
         journal.storage=persistent
         tty.serial.hvc0.agetty.autologin=root