On Mon, Oct 19, 2026 at 04:28:28PM -0700, Fan Wu wrote: > IPE doesn't use kselftest. Our tests live in the IPE CI [1], which > already has keyring tests for policy signatures [2] and an initrd unit > that provisions and seals the .fs-verity keyring [3]. Please add the > .ipe cases there instead.
Bad miss on my end; this is clearly documented. I have forked the IPE CI project in the meantime and run it against the kernel branch. Along with my next revision, I will share a branch for the IPE CI with tests added there and corresponding test results. I will wait for ongoing review discussions to converge before posting another revision.
