min
/
lanzaboote
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

lanzaboot: test systemd stage 1

This commit is contained in:
Raito Bezarius 2022-11-29 20:10:55 +01:00
parent e6aa11f76c
commit f7c66b027a
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
flake.nix
View File

@ -170,10 +170,22 @@
lanzaboote-boot = mkSecureBootTest { lanzaboote-boot = mkSecureBootTest {
name = "signed-files-boot-under-secureboot"; name = "signed-files-boot-under-secureboot";
testScript = '' testScript = ''
machine.start() machine.start()
assert "Secure Boot: enabled (user)" in machine.succeed("bootctl status") assert "Secure Boot: enabled (user)" in machine.succeed("bootctl status")
''; '';
}; };
lanzaboote-boot-under-sd-stage1 = mkSecureBootTest {
name = "signed-files-boot-under-secureboot-systemd-stage-1";
machine = { ... }: {
boot.initrd.systemd.enable = true;
};
testScript = ''
machine.start()
assert "Secure Boot: enabled (user)" in machine.succeed("bootctl status")
'';
};
# So, this is the responsibility of the lanzatool install # So, this is the responsibility of the lanzatool install
# to run the append-initrd-secret script # to run the append-initrd-secret script
# This test assert that lanzatool still do the right thing # This test assert that lanzatool still do the right thing