From f3ede28eac67c0055e9ae7d871990c31d4a4a37e Mon Sep 17 00:00:00 2001
From: Julian Stecklina <js@alien8.de>
Date: Thu, 2 Feb 2023 17:57:31 +0100
Subject: [PATCH] ci: fix regression after Linux loader change

Now that we don't sign the kernel anymore, we need to manually
invalidate its checksum.
---
 nix/tests/lanzaboote.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nix/tests/lanzaboote.nix b/nix/tests/lanzaboote.nix
index 06e9652..d8f0781 100644
--- a/nix/tests/lanzaboote.nix
+++ b/nix/tests/lanzaboote.nix
@@ -129,6 +129,7 @@ in
       src = "bootspec.get('kernel')";
       dst = "convert_to_esp(bootspec.get('kernel'))";
     };
+    appendCrap = true;
   };
 
   specialisation = mkSecureBootTest {