From: DaanDeMeyer <daan.j.demeyer@gmail.com>
Date: Mon, 30 Jun 2025 21:38:01 +0000 (+0200)
Subject: mkosi-tools: Make sure opensc module is registered with p11-kit
X-Git-Tag: v26~192^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e9ec77cac18ecedb5b2b05244109630a58b585b5;p=thirdparty%2Fmkosi.git

mkosi-tools: Make sure opensc module is registered with p11-kit

Otherwise openssl will fail to load keys off a yubikey when using
pkcs11-provider. For more discussion and why this isn't the default
everywhere, see https://gitlab.archlinux.org/archlinux/packaging/packages/opensc/-/issues/2.
---

diff --git a/mkosi/resources/mkosi-tools/mkosi.prepare b/mkosi/resources/mkosi-tools/mkosi.prepare
new file mode 100755
index 000000000..633a7cb1a
--- /dev/null
+++ b/mkosi/resources/mkosi-tools/mkosi.prepare
@@ -0,0 +1,4 @@
+#!/bin/bash
+set -e
+
+echo "module: opensc-pkcs11.so" >"$BUILDROOT/usr/share/p11-kit/modules/opensc.module"