From 9e3259b6fd163903c406b250e18782370e63c517 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@localhost>
Date: Wed, 12 Aug 2026 08:16:51 +0000
Subject: Verify initrd digest before native packaging

---
 src/build.rs | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/build.rs')

diff --git a/src/build.rs b/src/build.rs
index 8b6ebb0..cb6a436 100644
--- a/src/build.rs
+++ b/src/build.rs
@@ -110,6 +110,7 @@ impl<I: PackageInstaller, B: InitramfsBuilder> BuildExecutor<I, B> {
             Err(error) => return Self::fail_and_remove_workspace(workspace, error),
         };
         let result = (|| {
+            initrd.verify_in_rootfs(&rootfs)?;
             std::fs::create_dir_all(parent)
                 .with_context(|| format!("create artifact directory {}", parent.display()))?;
             self.tar_writer.write(&rootfs, artifact)?;
-- 
cgit v1.2.3