Re: [PATCH ima-evm-utils] boot_aggregate.test: Skip if CONFIG_IMA not enabled

[Petr Vorel <petr.vorel@gmail.com>]

Hi all,

...
> > Mikhail, my mistake.  Thank you for the correction!   Testing the
> > libressl changes should be a lot easier now.  Please remember to
> > include a distro travis.yml example.

> What do you mean? Do you mean adding testing of building ima-evm-utils against LibreSSL?
Yes, I understand Mimi wants this.

> Which environment is used there and which ones are available? There are not many dsitros where LibreSSL is pre-packaged [1], in many of them it is not updated often enough.
Look at the supported distros in travis/ in next or next-testing branch.
Could you use some bleeding edge distro (Tumbleweed or Fedora?)
You could handl LibreSSL vs. openSSL with variable, similarly like IBM TSS and
Intel TSS are handled (with $TSS variable).

> I would choose either ROSA where I myself maintain LibreSSL and ima-evm-utils or Arch Linux, is at least Arch Linux available in CI/CD environment?
> Won't we have to deal with often breakages of other parts of the rolling Arch Linux?

> Also, I can just build LibreSSL from source in any available distro, e.g. Ubuntu, but the pipeline will take a lot more time.
Please use distro package. Not only it's faster (as you noted), but it also
covers more users (IMHO most of the people use distro package, not a git version).

> How do we better deal with it?

Kind regards,
Petr

> [1] https://repology.org/project/libressl/versions