sunjizzle/diskless-workstation
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Add sbsigntool to the build image

Browse Source
This commit is contained in:
Audiobuzz
2026-06-20 03:32:56 +00:00
parent 249aeea591
commit 1887b6f0a2
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/gitea-main-ci.yaml
+6 -3
View File
@@ -118,8 +118,11 @@ jobs:
name: Install build-host tooling name: Install build-host tooling
# Tools the shell-local post-processors run on the RUNNER (not the VM): # Tools the shell-local post-processors run on the RUNNER (not the VM):
# libguestfs (virt-*), erofs-utils (mkfs.erofs), cryptsetup # libguestfs (virt-*), erofs-utils (mkfs.erofs), cryptsetup
# (veritysetup), jq, systemd-ukify (ukify), buildah (OCI), plus qemu + # (veritysetup), jq, systemd-ukify (ukify), sbsigntool (sbsign — used by
# shellcheck for the lint gate. # ukify to sign the UKI when SB_KEY/SB_CERT are set), buildah (OCI), plus
# qemu + shellcheck for the lint gate.
# NB: the Debian/Ubuntu package is sbsigntool (singular); on Fedora/RHEL
# it's sbsigntools (plural).
# #
# libguestfs builds a supermin appliance on first use, which needs a # libguestfs builds a supermin appliance on first use, which needs a
# kernel + modules present on the runner (incl. xfs, to read the build # kernel + modules present on the runner (incl. xfs, to read the build
@@ -134,7 +137,7 @@ jobs:
sudo apt-get install -y --no-install-recommends \ sudo apt-get install -y --no-install-recommends \
qemu-system-x86 qemu-utils libguestfs-tools linux-image-generic \ qemu-system-x86 qemu-utils libguestfs-tools linux-image-generic \
erofs-utils cryptsetup-bin jq systemd-ukify systemd-boot-efi \ erofs-utils cryptsetup-bin jq systemd-ukify systemd-boot-efi \
buildah shellcheck attr sbsigntool buildah shellcheck attr
sudo chmod 0644 /boot/vmlinuz-* 2>/dev/null || true sudo chmod 0644 /boot/vmlinuz-* 2>/dev/null || true
- -