From da33286b1f239228943687b7772ee8b983cb9b83 Mon Sep 17 00:00:00 2001
From: miampf <miampf@proton.me>
Date: Thu, 23 Jan 2025 17:00:22 +0100
Subject: [PATCH] use `sudo -E` and add a check if `systemd-dissect` is in PATH

---
 .github/workflows/check-measurements-reproducibility.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/check-measurements-reproducibility.yml b/.github/workflows/check-measurements-reproducibility.yml
index 8b8eb0392..e10f3f10c 100644
--- a/.github/workflows/check-measurements-reproducibility.yml
+++ b/.github/workflows/check-measurements-reproducibility.yml
@@ -24,5 +24,6 @@ jobs:
           bazel build //image/measured-boot/cmd
           buildPath="$PWD/bazel-bin/image"
           cd $(mktemp -d)
-          sudo "$buildPath/measured-boot/cmd/cmd_/cmd" "$buildPath/ssystem/qemu_qemu-vtpm_stable/constellation" ./measurements.json
+          which systemd-dissect
+          sudo -E "$buildPath/measured-boot/cmd/cmd_/cmd" "$buildPath/ssystem/qemu_qemu-vtpm_stable/constellation" ./measurements.json
           cat ./measurements.json | jq