mkosi-obs: do not publish roothash

importctl confuse it with a detached roothash and try to verify it, but it's
the roothash of the embedded partition, so don't publish it

diff --git a/mkosi/resources/mkosi-obs/mkosi.build b/mkosi/resources/mkosi-obs/mkosi.build
index 7b5503687ca50b2baa98addd59ad1163bcb61d0b..652214fe6579ef777655c60ff97d4dbbb8d5dc3e 100755 (executable)
--- a/mkosi/resources/mkosi-obs/mkosi.build
+++ b/mkosi/resources/mkosi-obs/mkosi.build
@@ -216,6 +216,9 @@ while read -r SIG; do
         zstd --force "$OUTPUTDIR/$(basename "${SIG%roothash.sig}")"raw*
         rm -f "$OUTPUTDIR/$(basename "${SIG%roothash.sig}raw")" "$OUTPUTDIR/$(basename "${SIG%roothash.sig}raw.img")"
     fi
+
+    # Do not publish the roothash here, as importctl and friends will mistake it as the roothash of the .raw image
+    rm -f "$OUTPUTDIR/$(basename "${SIG%.sig}")"
 done < <(find hashes/roothashes -type f -name '*.sig')
 rm -rf hashes/roothashes