Enable signed initrd and NvPCR measurements

1 files changed, 0 insertions, 43 deletions

diff --git a/tests/test_nvpcr_masks.py b/tests/test_nvpcr_masks.py
deleted file mode 100644
index b2ec429..0000000
--- a/tests/test_nvpcr_masks.py
+++ /dev/null
@@ -1,43 +0,0 @@
-import subprocess
-import unittest
-from pathlib import Path
-
-ROOT = Path(__file__).resolve().parents[1]
-MASKS = [
-    *(
-        f"etc/nvpcr/{name}.nvpcr"
-        for name in ("cryptsetup", "hardware", "login", "verity")
-    ),
-    "etc/systemd/system/systemd-pcrlogin@.service",
-    "etc/systemd/system/systemd-pcrproduct.service",
-]
-
-
-class NvPCRTests(unittest.TestCase):
-    def test_masks_are_empty_regular_files(self):
-        for name in MASKS:
-            path = ROOT / name
-            self.assertFalse(path.is_symlink())
-            self.assertEqual(path.read_bytes(), b"")
-
-    def test_initramfs_keeps_existing_files_and_includes_masks(self):
-        config = ROOT / "etc/mkinitcpio.conf.d/60-no-nvpcr.conf"
-        output = subprocess.check_output(
-            [
-                "bash",
-                "-c",
-                'FILES=(existing); source "$1"; printf "%s\\n" "${FILES[@]}"',
-                "bash",
-                str(config),
-            ],
-            text=True,
-        ).splitlines()
-        self.assertEqual(output, ["existing", *(f"/{name}" for name in MASKS)])
-
-    def test_srk_setup_and_pcr7_policy_remain_enabled(self):
-        for name in ("systemd-tpm2-setup.service", "systemd-tpm2-setup-early.service"):
-            self.assertFalse((ROOT / "etc/systemd/system" / name).exists())
-        policy = (
-            ROOT / "etc/systemd/system/systemd-pcrlock-make-policy.service.d/pcr7.conf"
-        )
-        self.assertIn("--pcr=7 --location=770", policy.read_text())