[mantic:linux-signed][PATCH 1/5] UBUNTU: Automatically generate sbsigntool depends

[Dimitri John Ledkov]

Iterate and check if EFI signing is on, and automatically add correct
sbsigntool depends.

BugLink: https://bugs.launchpad.net/bugs/2027818
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov at canonical.com>
---
 debian/control.stub             | 1 -
 debian/scripts/generate-control | 6 ++++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/debian/control.stub b/debian/control.stub
index 3ccbcd1831..58a2950ad1 100644
--- a/debian/control.stub
+++ b/debian/control.stub
@@ -8,6 +8,5 @@ Build-Depends:
  python3,
  python3-apt,
 Build-Depends-Arch:
- sbsigntool [amd64 arm64],
  @DEPENDS@,
 Standards-Version: 3.9.4
diff --git a/debian/scripts/generate-control b/debian/scripts/generate-control
index 181b7c8f51..4a778d9d9e 100755
--- a/debian/scripts/generate-control
+++ b/debian/scripts/generate-control
@@ -25,6 +25,12 @@ with open("debian/control.stub") as tfd, open("debian/control", "w") as cfd:
             if uci_archs:
                 print(f' ubuntu-core-initramfs [{" ".join(uci_archs)}] <generate>,', file=cfd)
             print(f" {generate_name} (= {source_version}),", file=cfd)
+            efi_archs = set()
+            for (arch, flavour), (stype, binary) in signing.arch_flavour_data:
+                if stype == 'efi':
+                    efi_archs.update([arch])
+            if efi_archs:
+                print(f' sbsigntool [{" ".join(efi_archs)}],', file=cfd)
         else:
             print(line, end='', file=cfd)
 
-- 
2.34.1