]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
mkosi: provide detached verity signatures too for minimal images
authorLuca Boccassi <luca.boccassi@gmail.com>
Thu, 16 Oct 2025 13:59:04 +0000 (14:59 +0100)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Fri, 7 Nov 2025 08:49:11 +0000 (09:49 +0100)
Useful for manual testing in the VM

(cherry picked from commit 39175477bd6e094542671599e0e258daa6351115)

mkosi/mkosi.postinst.chroot

index 32d2ad00f6f9d7bfeb30bb3f851b161e03f223dd..2251f00850884599d7761173d081d6881b12ca33 100755 (executable)
@@ -28,6 +28,7 @@ rm -f /etc/resolv.conf
 
 for f in "$BUILDROOT"/usr/share/*.verity.sig; do
     jq --join-output '.rootHash' "$f" >"${f%.verity.sig}.roothash"
+    jq --join-output '.signature' "$f" | base64 --decode >"${f%.verity.sig}.roothash.p7s"
 done
 
 # We want /var/log/journal to be created on first boot so it can be created with the right chattr settings by