]> git.ipfire.org Git - thirdparty/systemd.git/commit
ukify: when decompressing kernel before signing, call verify on decompressed file
authorLuca Boccassi <luca.boccassi@gmail.com>
Fri, 4 Jul 2025 00:06:54 +0000 (01:06 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Fri, 4 Jul 2025 03:39:43 +0000 (12:39 +0900)
commit60bda55f5b407a258be79b28b3a826b5122aa8da
treef8fd8ba2dacd63316fb198ad9c0952ae3c6ec269
parentc2f3bb742b572bb89f2018e1f928f87180c4e177
ukify: when decompressing kernel before signing, call verify on decompressed file

Otherwise it will fail as it's an archive, not a PE file:

Invalid DOS header magic
Can't open image /boot/vmlinuz.old
/boot/vmlinuz.old is compressed and cannot be loaded by UEFI, decompressing
+ sbverify --list /boot/vmlinuz.old
=========================== short test summary info ============================
FAILED ../src/ukify/test/test_ukify.py::test_efi_signing_sbsign[3650] - subprocess.CalledProcessError: Command '['sbverify', '--list', PosixPath('/boot/vmlinuz.old')]' returned non-zero exit status 1.
FAILED ../src/ukify/test/test_ukify.py::test_efi_signing_sbsign[None] - subprocess.CalledProcessError: Command '['sbverify', '--list', PosixPath('/boot/vmlinuz.old')]' returned non-zero exit status 1.
FAILED ../src/ukify/test/test_ukify.py::test_inspect - subprocess.CalledProcessError: Command '['sbverify', '--list', PosixPath('/boot/vmlinuz.old')]' returned non-zero exit status 1.

Follow-up for 0dd03215f1e402092f6c6da213708045e445a9ed
src/ukify/ukify.py