From f84d61d639a976f1c2516f218da48d89b6f0247f Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Mon, 29 Sep 2025 10:45:14 +0200 Subject: [PATCH] test: make sure TEST-50-DISSECT.mountfsd.sh can run standalone --- test/units/TEST-50-DISSECT.mountfsd.sh | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/test/units/TEST-50-DISSECT.mountfsd.sh b/test/units/TEST-50-DISSECT.mountfsd.sh index 067ed238e8c..d2ce67714ad 100755 --- a/test/units/TEST-50-DISSECT.mountfsd.sh +++ b/test/units/TEST-50-DISSECT.mountfsd.sh @@ -60,14 +60,21 @@ if (SYSTEMD_LOG_TARGET=console varlinkctl call \ exit 0 fi +# This should work without the key +systemd-dissect --image-policy='root=verity:=absent+unused' --mtree /var/tmp/unpriv.raw >/dev/null +systemd-dissect --image-policy='root=verity+signed:=absent+unused' --mtree /var/tmp/unpriv.raw >/dev/null + # This should fail before we install the key (! systemd-dissect --image-policy='root=signed:=absent+unused' --mtree /var/tmp/unpriv.raw >/dev/null) # Install key in keychain -cp /tmp/test-50-unpriv-cert.crt /run/verity.d +mkdir -p /run/verity.d +cp /tmp/test-50-unpriv-cert.crt /run/verity.d/ # This should work now systemd-dissect --image-policy='root=signed:=absent+unused' --mtree /var/tmp/unpriv.raw >/dev/null + +# This should still work systemd-dissect --image-policy='root=verity:=absent+unused' --mtree /var/tmp/unpriv.raw >/dev/null systemd-dissect --image-policy='root=verity+signed:=absent+unused' --mtree /var/tmp/unpriv.raw >/dev/null -- 2.47.3