From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Sat, 16 Nov 2024 14:49:45 +0000 (+0100)
Subject: Fix condition to also check the certificate source type
X-Git-Tag: v25~167^2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9a49c9d1e01d82489e1453fc45a9299bc3024fb9;p=thirdparty%2Fmkosi.git

Fix condition to also check the certificate source type
---

diff --git a/mkosi/bootloader.py b/mkosi/bootloader.py
index a11e3aeb4..76dc6ecc2 100644
--- a/mkosi/bootloader.py
+++ b/mkosi/bootloader.py
@@ -500,7 +500,11 @@ def run_systemd_sign_tool(
         sandbox=config.sandbox(
             binary=cmd[0],
             options=opt,
-            devices=devices or key_source.type != KeySourceType.file,
+            devices=(
+                devices
+                or key_source.type != KeySourceType.file
+                or certificate_source.type != CertificateSourceType.file
+            ),
         ),
     )