Check that systemd-sbsign is available before using it.

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index 3336fcc582e11a32a8f8afa6380846cc3a6d1cb8..b9f99aafb76f82494a98600c98c8fa9093a94bed 100644 (file)
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -1525,6 +1525,7 @@ def run_ukify(
                 "--signtool", (
                     "sbsign"
                     if context.config.secure_boot_sign_tool == SecureBootSignTool.sbsign
+                    or not context.config.find_binary("systemd-sbsign", "/usr/lib/systemd/systemd-sbsign")
                     else "systemd-sbsign"
                 ),
             ]  # fmt: skip