mkosi: Allow booting without secure boot

Don't fail if SecureBoot is not enabled. Instead, only execute
the secure boot related checks if secure boot is actually enabled.
This commit is contained in:
Daan De Meyer 2024-03-13 20:50:06 +01:00
parent d6e8137716
commit d1c29b517a

View File

@ -4,8 +4,9 @@
systemctl --failed --no-legend | tee /failed-services systemctl --failed --no-legend | tee /failed-services
# Check that secure boot keys were properly enrolled. # Check that secure boot keys were properly enrolled.
if ! systemd-detect-virt --container; then if ! systemd-detect-virt --container && \
cmp /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c <(printf '\6\0\0\0\1') cmp /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c <(printf '\6\0\0\0\1')
then
cmp /sys/firmware/efi/efivars/SetupMode-8be4df61-93ca-11d2-aa0d-00e098032b8c <(printf '\6\0\0\0\0') cmp /sys/firmware/efi/efivars/SetupMode-8be4df61-93ca-11d2-aa0d-00e098032b8c <(printf '\6\0\0\0\0')
if command -v sbsign &>/dev/null; then if command -v sbsign &>/dev/null; then