mirror of
https://github.com/systemd/systemd
synced 2025-10-05 16:03:15 +02:00
208ba34a43
Use the kernel keyring to verify images in the dissect test. The userspace keyring is still covered by the DDI and mountfsd tests.
19 lines
683 B
Bash
Executable File
19 lines
683 B
Bash
Executable File
#!/bin/bash
|
|
# SPDX-License-Identifier: CC-0
|
|
set -e
|
|
|
|
touch -r "$BUILDROOT/usr" "$BUILDROOT/etc/.updated" "$BUILDROOT/var/.updated"
|
|
|
|
if [ -n "$EFI_ARCHITECTURE" ]; then
|
|
mkdir -p "$BUILDROOT/boot/loader/addons"
|
|
ukify build \
|
|
--stub "$BUILDROOT/usr/lib/systemd/boot/efi/addon${EFI_ARCHITECTURE}.efi.stub" \
|
|
--cmdline="addonfoobar" \
|
|
--output "$BUILDROOT/boot/loader/addons/test.addon.efi" \
|
|
--secureboot-certificate "$SRCDIR/mkosi/mkosi.crt" \
|
|
--secureboot-private-key "$SRCDIR/mkosi/mkosi.key"
|
|
fi
|
|
|
|
# Used to sign artifacts verified by kernel platform keyring
|
|
cp "$SRCDIR/mkosi/mkosi.crt" "$SRCDIR/mkosi/mkosi.key" "$BUILDROOT/usr/share/"
|