-
Notifications
You must be signed in to change notification settings - Fork 89
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pacstrap fails due to mkinitcpio post hook #311
Comments
Upon further investigation it seems that the post hook script (/usr/lib/initcpio/post/sbctl) changed from version 0.13-2 to 0.14-1 8e0e68b: #!/usr/bin/bash
- echo "Signing EFI binaries..."
- /usr/bin/sbctl sign-all -g
+
+ KERENEL_FILE="$1"
+ UKI_FILE="$3"
+
+ IMAGE_FILE="$KERENEL_FILE"
+ if [ -n "$KERNELDESTINATION" ] && [ -f "$KERNELDESTINATION" ]; then
+ IMAGE_FILE="$KERNELDESTINATION"
+ fi
+ if [ -n "$UKI_FILE" ]; then
+ IMAGE_FILE="$UKI_FILE"
+ fi
+
+ if [ -z "$IMAGE_FILE" ]; then
+ echo "No kernel or UKI found for signing"
+ exit 0
+ fi
+
+ echo "Signing $IMAGE_FILE"
+ sbctl sign -s "$IMAGE_FILE"
|
Hello, Same error still appears on installation of sbctl, since the package hasn't been updated since this patch. Are there any plans to release a new version in the near future ? Thanks again
|
Hello,
pacstrap exits with the following error when invoked with sbctl in the package list, as it is apparently trying to sign before keys have even been created :
Full log
This used to work and I'm not sure what changed. I first noticed it from my weekly CI and reproduced on both my own machine and the official docker image. I suppose the hook should check for keys before attempting to sign?
Thanks, have a nice day
The text was updated successfully, but these errors were encountered: