PEError: Not enough header space to add section #76
Description
mkosi.local.conf:
[Distribution]
Distribution=arch # also for fedora
[Config]
Profiles=desktop,gnome # also for kde
[Validation]
SecureBootKey=../mkosi.key
SecureBootCertificate=../mkosi.crt
SignExpectedPcrKey=../mkosi.key
SignExpectedPcrCertificate=../mkosi.crt
VerityKey=../mkosi.key
VerityCertificate=../mkosi.crt
Error during mkosi -B -f on Fedora 42 KDE with mkosi 26-devel installed through OBS package:
/buildroot: /etc/hostname written.
‣ Generating hardware database
‣ Removing files…
‣ Creating cpio archive /home/admin/.cache/mkosi/mkosi-workspace-org7_n9v/staging/initrd.cpio…
‣ Compressing /home/admin/.cache/mkosi/mkosi-workspace-org7_n9v/staging/initrd.cpio with zstd
‣ /home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/initrd.cpio.zst size is 67.7M, consumes 67.7M.
‣ Running modinfo to fetch kernel module dependencies
‣ Calculating required kernel modules and firmware
‣ Creating cpio archive /home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/kernel-modules-6.15.8-arch1-1.initrd…
‣ Generating unified kernel image for kernel version 6.15.8-arch1-1
+ /usr/lib/systemd/systemd-sbsign sign --private-key /work/home/admin/mkosi.key --certificate /work/home/admin/mkosi.crt /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/modules/6.15.8-arch1-1/vmlinuz --output /tmp/linux-signed1u113zbr
Wrote signed PE binary to /tmp/linux-signed1u113zbr
+ /usr/lib/systemd/systemd-keyutil public --private-key /work/home/admin/mkosi.key
+ /usr/lib/systemd/systemd-measure sign --osrel=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/os-release --cmdline=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/cmdline --uname=/tmp/tmp.uname5jwu7i54 --splash=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/share/systemd/bootctl/splash-arch.bmp --pcrpkey=/tmp/tmp.pcrpkeyglcibtlu --linux=/tmp/linux-signed1u113zbr --initrd=/tmp/tmp.initrdtjslv8xq --ucode=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/microcode.initrd --sbat=/tmp/tmp.sbatc13zh6hc --profile=/tmp/tmp.profileruatp4o0 --bank=sha256 --private-key=/work/home/admin/mkosi.key
Copying section '.profile' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/live.efi': 40 bytes
Copying section '.cmdline' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/live.efi': 932 bytes
Not signing expected PCR measurements for "live" profile
Copying section '.profile' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/storagetm.efi': 60 bytes
Copying section '.cmdline' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/storagetm.efi': 518 bytes
Not signing expected PCR measurements for "storagetm" profile
Copying section '.profile' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/factory-reset.efi': 71 bytes
Copying section '.cmdline' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/factory-reset.efi': 801 bytes
+ /usr/lib/systemd/systemd-measure sign --profile=/tmp/tmp.profile4_cqk0ea --cmdline=/tmp/tmp.cmdline243tloai --osrel=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/os-release --uname=/tmp/tmp.uname5jwu7i54 --splash=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/share/systemd/bootctl/splash-arch.bmp --pcrpkey=/tmp/tmp.pcrpkeyglcibtlu --linux=/tmp/linux-signed1u113zbr --initrd=/tmp/tmp.initrdtjslv8xq --ucode=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/microcode.initrd --sbat=/tmp/tmp.sbatc13zh6hc --bank=sha256 --private-key=/work/home/admin/mkosi.key
Copying section '.profile' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/factory-reset-tpm2-clear.efi': 95 bytes
Copying section '.cmdline' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/factory-reset-tpm2-clear.efi': 505 bytes
Not signing expected PCR measurements for "factory-reset-tpm2-clear" profile
Copying section '.profile' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/emergency.efi': 46 bytes
Copying section '.cmdline' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/emergency.efi': 807 bytes
+ /usr/lib/systemd/systemd-measure sign --profile=/tmp/tmp.profilevxg1c60j --cmdline=/tmp/tmp.cmdlineadc648m5 --osrel=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/os-release --uname=/tmp/tmp.uname5jwu7i54 --splash=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/share/systemd/bootctl/splash-arch.bmp --pcrpkey=/tmp/tmp.pcrpkeyglcibtlu --linux=/tmp/linux-signed1u113zbr --initrd=/tmp/tmp.initrdtjslv8xq --ucode=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/microcode.initrd --sbat=/tmp/tmp.sbatc13zh6hc --bank=sha256 --private-key=/work/home/admin/mkosi.key
Copying section '.profile' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/debug.efi': 46 bytes
Copying section '.cmdline' from '/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/debug.efi': 845 bytes
+ /usr/lib/systemd/systemd-measure sign --profile=/tmp/tmp.profile45qo7r8v --cmdline=/tmp/tmp.cmdlinejtejxj21 --osrel=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/os-release --uname=/tmp/tmp.uname5jwu7i54 --splash=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/share/systemd/bootctl/splash-arch.bmp --pcrpkey=/tmp/tmp.pcrpkeyglcibtlu --linux=/tmp/linux-signed1u113zbr --initrd=/tmp/tmp.initrdtjslv8xq --ucode=/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/microcode.initrd --sbat=/tmp/tmp.sbatc13zh6hc --bank=sha256 --private-key=/work/home/admin/mkosi.key
Traceback (most recent call last):
File "/usr/bin/ukify", line 2526, in <module>
main()
~~~~^^
File "/usr/bin/ukify", line 2515, in main
make_uki(opts)
~~~~~~~~^^^^^^
File "/usr/bin/ukify", line 1505, in make_uki
pe_add_sections(opts, uki, unsigned_output)
~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/bin/ukify", line 1005, in pe_add_sections
raise PEError(f'Not enough header space to add section {section.name}.')
PEError: Not enough header space to add section .pcrsig.
‣ "python3 /usr/bin/ukify build --os-release @/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/os-release --uname 6.15.8-arch1-1 --linux /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/modules/6.15.8-arch1-1/vmlinuz --join-profile /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/live.efi --join-profile /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/storagetm.efi --join-profile /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/factory-reset.efi --join-profile /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/factory-reset-tpm2-clear.efi --join-profile /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/emergency.efi --join-profile /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/uki-profiles/debug.efi --sign-profile=main --sign-profile factory-reset --sign-profile emergency --sign-profile debug --splash /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/share/systemd/bootctl/splash-arch.bmp --sign-kernel --pcr-banks sha256 --pcr-private-key /work/home/admin/mkosi.key --microcode /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/microcode.initrd --initrd /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/initrd --initrd /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/kernel-modules-6.15.8-arch1-1.initrd --efi-arch x64 --stub /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/usr/lib/systemd/boot/efi/linuxx64.efi.stub --output /work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/root/boot/EFI/Linux/ParticleOS_20250728200641_x86-64.efi --cmdline @/work/home/admin/.cache/mkosi/mkosi-workspace-qt9fjwx9/cmdline --signtool systemd-sbsign --secureboot-private-key /work/home/admin/mkosi.key --secureboot-certificate /work/home/admin/mkosi.crt" returned non-zero exit code 1