``` ● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38 Digest: sha256:

● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38
                   Digest: sha256:1df2b3521aa552b45686d5bb38b85fc01823259ca08d50004fc6b06cdda84950
                  Version: 38.20230719.0 (2023-07-19T20:56:45Z)
            LocalPackages: 1password-8.10.8-1.x86_64

● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38
                   Digest: sha256:1df2b3521aa552b45686d5bb38b85fc01823259ca08d50004fc6b06cdda84950
                  Version: 38.20230719.0 (2023-07-19T20:56:45Z)
            LocalPackages: 1password-8.10.8-1.x86_64

● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38
                   Digest: sha256:1df2b3521aa552b45686d5bb38b85fc01823259ca08d50004fc6b06cdda84950
                  Version: 38.20230719.0 (2023-07-19T20:56:45Z)
            LocalPackages: 1password-8.10.8-1.x86_64

● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38
                   Digest: sha256:1df2b3521aa552b45686d5bb38b85fc01823259ca08d50004fc6b06cdda84950
                  Version: 38.20230719.0 (2023-07-19T20:56:45Z)
            LocalPackages: 1password-8.10.8-1.x86_64

Jj0rge ``` ● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38 ...

bsherman•7/20/23, 4:47 PM

bluefin has the benefit of building in ublue-osublue-os org and signing with the ublue-os key so no custom policy required

j0rgeOP•7/20/23, 4:47 PM

yeah

bsherman•7/20/23, 4:47 PM

looks pretty easy for me to add though

bsherman•7/20/23, 4:47 PM

i just need a better name

bsherman•7/20/23, 4:47 PM

and, i'm building too many varieties

j0rgeOP•7/20/23, 10:56 PM

hey @bsherman

j0rgeOP•7/20/23, 10:56 PM

j0rgeOP•7/20/23, 10:56 PM

my propaganda is now in newsletters.

j0rgeOP•7/20/23, 10:56 PM

(I wrote these two)

j0rgeOP•7/20/23, 10:56 PM

bummer about the "merger" typo, but whatever

bsherman•7/20/23, 11:16 PM

Remind me to read/watch

Gerblesh•7/21/23, 2:34 AM

@j0rge how would I get the github username from the build script or containerfile? I'm trying to figure out how to make image signing in startingpoint easy

Gerblesh•7/21/23, 2:34 AM

so that it's literally just updating the image

Gerblesh•7/21/23, 2:34 AM

and rebasing

Gerblesh•7/21/23, 2:34 AM

no messing with policy.json

Gerblesh•7/21/23, 2:36 AM

ah ok, figured it out

Gerblesh•7/21/23, 2:53 AM

see if it works

Gerblesh•7/21/23, 2:53 AM

if it does, i'll make a PR

Gerblesh•7/21/23, 5:07 AM

OK finally got it working

Gerblesh•7/21/23, 5:44 AM

https://github.com/ublue-os/startingpoint/pull/116

GitHub

feat: add support for image signing by gerblesh · Pull Request #116...

This PR adds image signing, with no additional configuration required from the user
Things done:

copy cosign public key and policy.json in the proper place (/etc/pki/containers/cosign.pub and /etc...