From 14afe7ce9b71560e2edd26ac78bba32145c0b593 Mon Sep 17 00:00:00 2001
From: Julian Stecklina <js@alien8.de>
Date: Sat, 10 Feb 2024 20:52:22 +0100
Subject: [PATCH] tests: check whether our UKIs are recognized

---
 nix/tests/lanzaboote.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nix/tests/lanzaboote.nix b/nix/tests/lanzaboote.nix
index 2989606..3af78f5 100644
--- a/nix/tests/lanzaboote.nix
+++ b/nix/tests/lanzaboote.nix
@@ -202,6 +202,10 @@ in
     testScript = ''
       machine.start()
       assert "Secure Boot: enabled (user)" in machine.succeed("bootctl status")
+
+      # We want systemd to recognize our PE binaries as true UKIs. systemd has
+      # become more picky in the past, so make sure.
+      assert "Kernel Type: uki" in machine.succeed("bootctl kernel-inspect /boot/EFI/Linux/nixos-generation-1-*.efi")
     '';
   };