pacstrap fails due to mkinitcpio post hook #311
Comments
|
Upon further investigation it seems that the post hook script (/usr/lib/initcpio/post/sbctl) changed from version 0.13-2 to 0.14-1 8e0e68b: #!/usr/bin/bash
- echo "Signing EFI binaries..."
- /usr/bin/sbctl sign-all -g
+
+ KERENEL_FILE="$1"
+ UKI_FILE="$3"
+
+ IMAGE_FILE="$KERENEL_FILE"
+ if [ -n "$KERNELDESTINATION" ] && [ -f "$KERNELDESTINATION" ]; then
+ IMAGE_FILE="$KERNELDESTINATION"
+ fi
+ if [ -n "$UKI_FILE" ]; then
+ IMAGE_FILE="$UKI_FILE"
+ fi
+
+ if [ -z "$IMAGE_FILE" ]; then
+ echo "No kernel or UKI found for signing"
+ exit 0
+ fi
+
+ echo "Signing $IMAGE_FILE"
+ sbctl sign -s "$IMAGE_FILE"
|
punoko
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hello,
pacstrap exits with the following error when invoked with sbctl in the package list, as it is apparently trying to sign before keys have even been created :
Full log
This used to work and I'm not sure what changed. I first noticed it from my weekly CI and reproduced on both my own machine and the official docker image. I suppose the hook should check for keys before attempting to sign?
Thanks, have a nice day
The text was updated successfully, but these errors were encountered: