(In reply to Martin Wilck from comment #8) > (In reply to Michal Suchanek from comment #7) > > > There are branches that do nothing and branch that complains about wrong > > scriptlet. > > So what? What's the benefit of running the noop branch, or seeing that > complaint on systems where the entire concept of certificates doesn't matter? > > By definition, cert-script is a noop on systems that don't support UEFI. We have secure boot on s390 and support for POWER is in progress (expected in 15 SP5). Maybe the kernel makes this look like EFI to userspace but the expectation is that we will have a different tool for POWER eventually. > Therefore exiting early (and without a warning, which would just confuse > users without good reason) on such a system is the right thing to do. As a > side effect, it makes the code more compact and easier to read. To the contrary - code that exits at random is difficult to follow, and is the very cause of bug 1189841 - if your code does not run because of IFS set at the start of because of a test exiting at the start the result is the same - the code does not run.