Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: remove signatures in container deployments by default #990

Merged

Conversation

mmartinv
Copy link
Contributor

@mmartinv mmartinv commented Oct 18, 2024

Make skopeo copy to remove the signatures of signed containers by default to workaround build failures until containers/image#2599 is implemented.

Depends: osbuild/osbuild#1906
Resolves: osbuild/bootc-image-builder#681

Signed-off-by: Miguel Martín [email protected]

@cgwalters
Copy link
Contributor

Please also canonically reference containers/image#2599 (in the code as well)

ondrejbudai
ondrejbudai previously approved these changes Oct 18, 2024
@mmartinv mmartinv marked this pull request as ready for review October 21, 2024 12:23
@mmartinv mmartinv marked this pull request as draft October 21, 2024 12:24
@mmartinv mmartinv force-pushed the container-deploy-remove-signatures branch from d524795 to 32fa866 Compare October 22, 2024 06:01
@mmartinv mmartinv force-pushed the container-deploy-remove-signatures branch from 32fa866 to 7a4fcc0 Compare October 22, 2024 09:50
@mmartinv mmartinv force-pushed the container-deploy-remove-signatures branch from 7a4fcc0 to ba6af52 Compare October 22, 2024 09:53
@mmartinv mmartinv marked this pull request as ready for review October 22, 2024 09:53
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 22, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 22, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 23, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 23, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 23, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
achilleas-k
achilleas-k previously approved these changes Oct 23, 2024
@achilleas-k achilleas-k added this pull request to the merge queue Oct 23, 2024
@achilleas-k achilleas-k removed this pull request from the merge queue due to a manual request Oct 23, 2024
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 24, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mvo5
mvo5 previously approved these changes Oct 24, 2024
Copy link
Contributor

@mvo5 mvo5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you

pkg/osbuild/container_deploy_stage.go Show resolved Hide resolved
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 25, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 25, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 25, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
@mmartinv mmartinv dismissed stale reviews from mvo5 and achilleas-k via 691be91 October 25, 2024 18:02
@mmartinv mmartinv force-pushed the container-deploy-remove-signatures branch from ba6af52 to 691be91 Compare October 25, 2024 18:02
Copy link
Contributor

@mvo5 mvo5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you

mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 28, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 29, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
Make `skopeo copy` to remove the signatures of signed containers
by default to avoid build failures until [1] is implemented.

Depends: osbuild/osbuild#1906
Resolves: osbuild/bootc-image-builder#681

[1] containers/image#2599

Co-authored-by: Michael Vogt <[email protected]>
@mmartinv mmartinv force-pushed the container-deploy-remove-signatures branch from 691be91 to 8049ad7 Compare October 29, 2024 11:21
@mmartinv mmartinv requested a review from mvo5 October 29, 2024 11:22
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Oct 30, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
@achilleas-k achilleas-k added this pull request to the merge queue Oct 30, 2024
Merged via the queue into osbuild:main with commit 6b93e69 Oct 30, 2024
18 of 19 checks passed
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 4, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 4, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 4, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 5, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 5, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 5, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
mmartinv added a commit to mmartinv/bootc-image-builder that referenced this pull request Nov 5, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
github-merge-queue bot pushed a commit to osbuild/bootc-image-builder that referenced this pull request Nov 5, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
github-merge-queue bot pushed a commit to osbuild/bootc-image-builder that referenced this pull request Nov 5, 2024
Add anaconda-iso iso build tests with signed containers.
The rest of the images can be also added to the test once
[1] and [2] are merged

[1] osbuild/images#990
[2] osbuild/osbuild#1906

Signed-off-by: Miguel Martín <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Disk image generation fails with signed containers
5 participants