invalid signature when validating ASN.1 encoded signature
i've replaced the keys in my repository because i thought something broke and would be a possible solution, then realized nothing was actually broken but it was already too late and have changed them
the images build fine, but when trying to do
(repo link)
the images build fine, but when trying to do
rpm-ostree upgraderebaseerror: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: cryptographic signature verification failed: invalid signature when validating ASN.1 encoded signature(repo link)
Solution
I'll copy my answer:
For anyone who encounters this, those are the steps to solve the issue:
Copy new
Modify
Run
Copy new policy.json
Profit
You can verify if new cosign & policy.json is used here. If they're not listed, then you're good. This command tracks changed files in /etc compared to /usr/etc
For anyone who encounters this, those are the steps to solve the issue:
Copy new
cosign.pub/etc/pki/containers/$your_image_name.pubsudo cp your-cosign.pub /etc/pki/containers/$your_image_name.pubModify
/etc/containers/policy.jsonkeyPath/usr/etc/etc"keyPath": "/etc/pki/containers/$your_image_name.pub"Run
rpm-ostree upgradeCopy new policy.json
sudo cp /usr/etc/containers/policy.json /etc/containers/policy.jsonProfit
You can verify if new cosign & policy.json is used here. If they're not listed, then you're good. This command tracks changed files in /etc compared to /usr/etc
sudo ostree admin config-diff