Verify initrd digest before native packaging

1 files changed, 1 insertions, 0 deletions

diff --git a/src/build.rs b/src/build.rs
index 8b6ebb0..cb6a436 100644
--- a/src/build.rs
+++ b/src/build.rs
@@ -110,6 +110,7 @@ impl<I: PackageInstaller, B: InitramfsBuilder> BuildExecutor<I, B> {
             Err(error) => return Self::fail_and_remove_workspace(workspace, error),
         };
         let result = (|| {
+            initrd.verify_in_rootfs(&rootfs)?;
             std::fs::create_dir_all(parent)
                 .with_context(|| format!("create artifact directory {}", parent.display()))?;
             self.tar_writer.write(&rootfs, artifact)?;