mock: bind mount qubes-pesign socket on build

QubesOS · Dec 1, 2023 · 672ddb7 · 672ddb7
1 parent 6298c0b
commit 672ddb7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/qubesbuilder/plugins/chroot_rpm/mock/fedora.cfg b/qubesbuilder/plugins/chroot_rpm/mock/fedora.cfg
@@ -17,6 +17,11 @@ config_opts['use_bootstrap'] = False
 config_opts['plugin_conf']['bind_mount_enable'] = os.environ.get("BIND_MOUNT_ENABLE", False)
 config_opts['plugin_conf']['bind_mount_opts']['dirs'].append(('@BUILDER_DIR@/plugins', '/plugins' ))
 
+# mount the qubes-pesign socket into the chroot
+if os.path.exists("/var/run/qubes-pesign"):
+    config_opts['plugin_conf']['bind_mount_opts']['dirs'].append(('/var/run/qubes-pesign', '/var/run/qubes-pesign' ))
+    config_opts['nspawn_args'] += ['--bind=/var/run/qubes-pesign']
+
 config_opts['dnf.conf'] = """
 [main]
 keepcache=1