sandbox: check if bwrap is installed

bwrap is used for many many different things, so I just added a blanket
check that requires is to be always required if use any of the verbs that
call check_tools().

Fixes https://github.com/systemd/mkosi/issues/2719.

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index 08e1fb5844bb93cd59847860f480585ab2e361b2..4bd9b660628d338c065f64397ae368048135ae96 100644 (file)
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -2724,6 +2724,8 @@ def check_systemd_tool(
 
 
 def check_tools(config: Config, verb: Verb) -> None:
+    check_tool(config, "bwrap", reason="execute sandboxed commands")
+
     if verb == Verb.build:
         if config.bootable != ConfigFeature.disabled:
             check_tool(config, "depmod", reason="generate kernel module dependencies")