On Mon, Jul 27, 2026 at 10:51:32AM -0600, Tom Rini wrote:
> This fails in CI:
> https://git.u-boot-project.org/u-boot/u-boot/-/jobs/50414
>
> I've just made you a contributor area, so at least pushing this through
> CI until it works will be easier now.
Thanks for flagging this, and for the contributor area -- that'll help
a lot for iterating without round-tripping through the list.
Root cause: test_fit_verity_roothash_signed() (patch 3) builds a FIT
with a dm-verity subnode, which makes mkimage shell out to veritysetup
internally to compute the Merkle tree/roothash. The test only declared
dtc, fdtget, fdtput and openssl as required tools, not veritysetup.
The CI image doesn't have veritysetup installed, so mkimage's internal
exec of it fails silently, since the diagnostic goes to a private pipe
mkimage uses to parse veritysetup's own stdout, not to stderr.
Going to fix this by adding @pytest.mark.requiredtool('veritysetup')
to test_fit_verity_roothash_signed(), matching test_fit_verity.py.
Verified locally both ways: with veritysetup hidden from PATH the test
now skips instead of failing, and with it present it still passes.
I'll push this through the CI and send v4 once it's green.
Cheers
Daniel
