add sudo to secureboot check (#1821)

This commit is contained in:
Antheas Kapenekakis 2024-10-30 22:59:33 +01:00 committed by GitHub
parent fe2ba90ec6
commit 5b48ae627c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -276,9 +276,10 @@ jobs:
sudo apt update
sudo apt install sbsigntool curl openssl
fi
TMP=$(podman create raw-img bash)
podman cp $TMP:/usr/lib/modules/${{ matrix.kernel_version }}/vmlinuz .
podman rm $TMP
TMP=$(sudo podman create raw-img bash)
sudo podman cp $TMP:/usr/lib/modules/${{ matrix.kernel_version }}/vmlinuz .
sudo podman rm $TMP
sudo chmod 666 vmlinux # might not be needed
sbverify --list vmlinuz
curl --retry 3 -Lo kernel-sign.der https://github.com/ublue-os/kernel-cache/raw/main/certs/public_key.der
curl --retry 3 -Lo akmods.der https://github.com/ublue-os/kernel-cache/raw/main/certs/public_key_2.der