if config.bootable != ConfigFeature.disabled:
check_tool(config, "depmod", reason="generate kernel module dependencies")
- if want_efi(config) and config.unified_kernel_images == ConfigFeature.enabled:
+ if want_efi(config):
if config.unified_kernel_image_profiles:
check_ukify(
config,
- version="257",
+ version="257~devel",
reason="build unified kernel image profiles",
hint=(
"Use ToolsTree=default to download most required tools including ukify "
"automatically"
),
)
- else:
+ elif config.unified_kernel_images == ConfigFeature.enabled:
check_ukify(
config,
version="254",
reason="sign PCR hashes with OpenSSL engine",
)
- if config.unified_kernel_image_profiles:
- check_ukify(
- config,
- version="257~devel",
- reason="add unified kernel image profiles",
- )
-
if config.verity_key_source.type != KeySourceType.file:
check_systemd_tool(
config,