From: Luca Boccassi <luca.boccassi@gmail.com>
Date: Tue, 15 Apr 2025 14:22:49 +0000 (+0100)
Subject: mkosi-obs: do not publish roothash
X-Git-Tag: v26~243
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=124f551e773da2b2de697eaaa20c92246bb83ef9;p=thirdparty%2Fmkosi.git

mkosi-obs: do not publish roothash

importctl confuse it with a detached roothash and try to verify it, but it's
the roothash of the embedded partition, so don't publish it
---

diff --git a/mkosi/resources/mkosi-obs/mkosi.build b/mkosi/resources/mkosi-obs/mkosi.build
index 7b5503687..652214fe6 100755
--- a/mkosi/resources/mkosi-obs/mkosi.build
+++ b/mkosi/resources/mkosi-obs/mkosi.build
@@ -216,6 +216,9 @@ while read -r SIG; do
         zstd --force "$OUTPUTDIR/$(basename "${SIG%roothash.sig}")"raw*
         rm -f "$OUTPUTDIR/$(basename "${SIG%roothash.sig}raw")" "$OUTPUTDIR/$(basename "${SIG%roothash.sig}raw.img")"
     fi
+
+    # Do not publish the roothash here, as importctl and friends will mistake it as the roothash of the .raw image
+    rm -f "$OUTPUTDIR/$(basename "${SIG%.sig}")"
 done < <(find hashes/roothashes -type f -name '*.sig')
 rm -rf hashes/roothashes