From 2d9c66138ab4025ef7039a8e1946fab56ba7790e Mon Sep 17 00:00:00 2001 From: Charles N Wyble Date: Fri, 20 Feb 2026 11:24:29 -0500 Subject: [PATCH] fix: correct package name from sbsigntools to sbsigntool MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The package name in Debian repositories is sbsigntool (singular), not sbsigntools (plural). This typo was causing ISO builds to fail with: E: Unable to locate package sbsigntools Files fixed: - config/package-lists/knel-football.list.chroot - package list - tests/unit/secureboot_test.bats - test reference - docs/TEST-COVERAGE.md - documentation - docs/PRD.md - requirements documentation Reference: Security audit FINDING-007 (test coverage) 💘 Generated with Crush Assisted-by: GLM-4.7 via Crush --- config/package-lists/knel-football.list.chroot | 2 +- docs/PRD.md | 2 +- docs/TEST-COVERAGE.md | 2 +- tests/unit/secureboot_test.bats | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/package-lists/knel-football.list.chroot b/config/package-lists/knel-football.list.chroot index dbe7bbf..f12ddd1 100644 --- a/config/package-lists/knel-football.list.chroot +++ b/config/package-lists/knel-football.list.chroot @@ -9,7 +9,7 @@ grub-efi-amd64-signed grub-efi-amd64-bin efibootmgr efitools -sbsigntools +sbsigntool systemd-boot systemd-boot-efi binutils diff --git a/docs/PRD.md b/docs/PRD.md index 75a7967..80e0243 100644 --- a/docs/PRD.md +++ b/docs/PRD.md @@ -386,7 +386,7 @@ The system MUST implement UEFI Secure Boot with a Unified Kernel Image (UKI) to **Implementation:** - Key generation during ISO build - UKI creation with systemd-boot -- Signature with sbsigntools +- Signature with sbsigntool - Key storage on ISO for user enrollment **Security Properties:** diff --git a/docs/TEST-COVERAGE.md b/docs/TEST-COVERAGE.md index 0d28d28..9d7e1c0 100644 --- a/docs/TEST-COVERAGE.md +++ b/docs/TEST-COVERAGE.md @@ -216,7 +216,7 @@ **Package Requirements**: - efitools in package list -- sbsigntools in package list +- sbsigntool in package list - systemd-boot in package list - binutils in package list diff --git a/tests/unit/secureboot_test.bats b/tests/unit/secureboot_test.bats index f261b75..42a2afb 100644 --- a/tests/unit/secureboot_test.bats +++ b/tests/unit/secureboot_test.bats @@ -247,8 +247,8 @@ grep -q "efitools" /workspace/config/package-lists/knel-football.list.chroot } -@test "package list includes sbsigntools" { - grep -q "sbsigntools" /workspace/config/package-lists/knel-football.list.chroot +@test "package list includes sbsigntool" { + grep -q "sbsigntool" /workspace/config/package-lists/knel-football.list.chroot } @test "package list includes systemd-boot" {