#!/usr/bin/env bash
# SPDX-License-Identifier: LGPL-2.1-or-later
set -e

touch -r "$BUILDROOT/usr" "$BUILDROOT/etc/.updated" "$BUILDROOT/var/.updated"

if [ -n "$EFI_ARCHITECTURE" ]; then
    mkdir -p "$BUILDROOT/boot/loader/addons"
    ukify build \
        --stub "$BUILDROOT/usr/lib/systemd/boot/efi/addon${EFI_ARCHITECTURE}.efi.stub" \
        --cmdline="addonfoobar" \
        --output "$BUILDROOT/boot/loader/addons/test.addon.efi" \
        --secureboot-certificate "$SRCDIR/mkosi/mkosi.crt" \
        --secureboot-private-key "$SRCDIR/mkosi/mkosi.key"
fi

# Used to sign artifacts verified by kernel platform keyring
cp "$SRCDIR/mkosi/mkosi.crt" "$SRCDIR/mkosi/mkosi.key" "$BUILDROOT/usr/share/"