``` { "default": [ { "type": "reject" } ], "transports": { "docker": {

{
  "default": [
    {
      "type": "reject"
    }
  ],
  "transports": {
    "docker": {
      "registry.access.redhat.com": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "registry.redhat.io": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "ghcr.io/ublue-os": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/ublue-os.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ],
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ],
      "ghcr.io/gerblesh": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/usway.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ]
    },
    "docker-daemon": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "atomic": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "containers-storage": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "dir": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "oci": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "tarball": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    }
  }
}

{
  "default": [
    {
      "type": "reject"
    }
  ],
  "transports": {
    "docker": {
      "registry.access.redhat.com": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "registry.redhat.io": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "ghcr.io/ublue-os": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/ublue-os.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ],
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ],
      "ghcr.io/gerblesh": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/usway.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ]
    },
    "docker-daemon": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "atomic": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "containers-storage": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "dir": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "oci": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "tarball": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    }
  }
}

{
  "default": [
    {
      "type": "reject"
    }
  ],
  "transports": {
    "docker": {
      "registry.access.redhat.com": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "registry.redhat.io": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "ghcr.io/ublue-os": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/ublue-os.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ],
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ],
      "ghcr.io/gerblesh": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/usway.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ]
    },
    "docker-daemon": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "atomic": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "containers-storage": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "dir": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "oci": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "tarball": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    }
  }
}

{
  "default": [
    {
      "type": "reject"
    }
  ],
  "transports": {
    "docker": {
      "registry.access.redhat.com": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "registry.redhat.io": [
        {
          "type": "signedBy",
          "keyType": "GPGKeys",
          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
        }
      ],
      "ghcr.io/ublue-os": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/ublue-os.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ],
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ],
      "ghcr.io/gerblesh": [
        {
          "type": "sigstoreSigned",
          "keyPath": "/usr/etc/pki/containers/usway.pub",
          "signedIdentity": {
            "type": "matchRepository"
          }
        }
      ]
    },
    "docker-daemon": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "atomic": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "containers-storage": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "dir": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "oci": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    },
    "tarball": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    }
  }
}

GGerblesh ``` { "default": [ { "type": "reject" } ], "transports": { ...

GerbleshOP•7/23/23, 7:16 PM

idk if this is right, is it fine that the custom repo comes after the blank string?

GerbleshOP•7/23/23, 7:17 PM

anyhow I gotta get going, sorry for making a broken PR and not marking it as draft

j0rge•7/23/23, 8:26 PM

ok I reverted, there's a conflict you need to resolve

GGerblesh anyhow I gotta get going, sorry for making a broken PR and not marking it as dra...

j0rge•7/23/23, 8:48 PM

no need to apologize, that's what git is for. walters just responded to my email, he's hoping to document the situation better this week, they were dealing with a higher priority issue last week.

GGerblesh idk if this is right, is it fine that the custom repo comes after the blank stri...

GerbleshOP•7/24/23, 2:48 AM

does anyone know if the order matters?

j0rge•7/24/23, 2:53 AM

@bsherman @KyleGospo hey rando idea

j0rge•7/24/23, 2:54 AM

conceptually, since we're building akmods in that repo, couldn't we build nvidia there and then have the nvidia images build out of main?

Robert•7/24/23, 5:40 AM

That's what I've been doing for a while now, and it works great.

The only thing I am wanting to do is split the builds to be grouped by Fedora version. E.g. make sure 38-Nvidia does not depend on 37 builds

Jj0rge conceptually, since we're building akmods in that repo, couldn't we build nvidia...

Kyle Gospo•7/24/23, 6:12 AM

I'm not super familiar with how nvidia is built, but certainly we could host the kmod portion there

Kyle Gospo•7/24/23, 6:31 AM

@bsherman build errors on akmods are from Kernel 6.4, Gasket driver needed an update

Kyle Gospo•7/24/23, 6:31 AM

that's building now

GerbleshOP•7/24/23, 6:38 AM

https://github.com/ublue-os/startingpoint/pull/121
@j0rge the PR is up and i've resolved the conflicts

also what do you think of naming the repo file and public key the name of the repo?
Would that be the best choice or is there something else you have in mind?

GitHub

refactor: fix jq, rename cosign.yaml and cosign.pub by gerblesh · P...

Sorry, forgot to make the last PR a draft, jq wasn't working as intended as well as a couple other things, this should fix it all

j0rge•7/24/23, 12:58 PM

yeah that seems to make sense

EyeCantCU•7/24/23, 1:39 PM

I was thinking... With the faster build times we can probably fine tune when builds are triggered to get releases out more synchronously

EyeCantCU•7/24/23, 1:42 PM

For instance, even though the build time for main is 10 minutes, we wait a while hour it looks like for Nvidia

j0rge•7/24/23, 1:42 PM

what I'd like is to trigger builds via rss or a webhook mechanism or something

j0rge•7/24/23, 1:43 PM

like when you push something into config it should trigger the rest of the stack

EyeCantCU•7/24/23, 1:43 PM

That would be awesome. Then we wouldn't really have to worry about scheduled build times. Expensive but awesome

EEyeCantCU That would be awesome. Then we wouldn't really have to worry about scheduled bui...

Bigpod•7/24/23, 1:43 PM

not that expensive, done it in past

EyeCantCU•7/24/23, 1:44 PM

That's good to hear

Bigpod•7/24/23, 1:44 PM

webhooks should require 0 infrastructure if i remember correctly

j0rge•7/24/23, 1:45 PM

yeah but like we'd probably keep the paid builders for the cron jobs

Bigpod•7/24/23, 1:45 PM

you can have both for a while, to see that it works correctly(i mean using webhooks and timers)

EEyeCantCU That's good to hear

Bigpod•7/24/23, 1:50 PM

@j0rge crap i think they changed how they group the webhooks so you do need infrastructure. As they group workflow requested and workflow completed together.

j0rge•7/24/23, 1:54 PM

there's a few webhook apps we could use, but haven't investigated recently

Bigpod•7/24/23, 1:55 PM

true

GGerblesh https://github.com/ublue-os/startingpoint/pull/121 @j0rge the PR is up and i've ...