ci: Test with secure boot enabled under mkosi

This gives us some nice test coverage for secure boot enrolling and the stub secure boot workound. The authenticated EFI variables are already created by mkosi, all we need to do is request secure boot to be used.
2023-02-01 17:16:03 +01:00
parent c2aed1d16c
commit 2de6cc18f9
2 changed files with 10 additions and 1 deletions
@@ -95,8 +95,11 @@ jobs:
        KernelCommandLine=${{ env.KERNEL_CMDLINE }}
        EOF

+    - name: Generate secure boot key
+      run: sudo mkosi genkey
+
    - name: Build ${{ matrix.distro }}
-      run: sudo mkosi --idmap no
+      run: sudo mkosi --idmap no --secure-boot

    - name: Show ${{ matrix.distro }} image summary
      run: sudo mkosi summary