Build has empty error, possible reason known

[boredsquirrel]

I have the feeling that it is this issue

I am experimenting with using secureblue as base image. I have a very simple setup, followed the guide to setup cosign keys also in the repo.

Just changed the recipe.yaml:

# image will be published to ghcr.io/<user>/<name>
name: template
# description will be included in the image's metadata
description: This is my personal OS image.

# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/secureblue/kinoite-main-userns-hardened
image-version: 40 # latest is also supported if you want new updates ASAP

# module configuration, executed in order
# you can include multiple instances of the same module
modules:
  - type: files
    files:
      - usr: /usr # copies config/files/usr into your image's /usr.
                  # put configuration files you want in /etc/ on a booted system 
                  # in /usr/etc/ in the image. read more in files module reference.

  - type: rpm-ostree
    repos:
      # - https://copr.fedorainfracloud.org/coprs/atim/starship/repo/fedora-%OS_VERSION%/atim-starship-fedora-%OS_VERSION%.repo
    install:
        - firefox
        - firefox-langpacks
      # - micro
      # - starship
    remove:
      # example: removing firefox (in favor of the flatpak)
      # "firefox" is the main package, "firefox-langpacks" is a dependency
      # - firefox
      # - firefox-langpacks # also remove firefox dependency (not required for all packages, this is a special case)

  - type: default-flatpaks
    notify: true # Send notification after install/uninstall is finished (true/false)
    system:
      # If no repo information is specified, Flathub will be used by default
      # repo-url: https://dl.flathub.org/repo/flathub.flatpakrepo
      # repo-name: flathub
      # repo-title: "Flathub (system-wide)" # Optional; this sets the remote's user-facing name in graphical frontends like GNOME Software
      install:
        # - org.mozilla.firefox
        # - org.gnome.Loupe
        # - one.ablaze.floorp//lightning # This is an example of flatpak which has multiple branches in selection (flatpak//branch).
      # Flatpak runtimes are not supported (like org.winehq.Wine//stable-23.08),
      # only normal flatpak applications are (like Floorp Lightning web browser in this example).
      # Installing different branches of the same Flatpak is not supported.
      remove:
      # - org.gnome.eog

  - type: signing # this sets up the proper policy & signing files for signed images to work fully

firefox is removed from the secureblue base image, and the ability to in general be able to install packages that were included, then override-removed in a previous container build process, is crucial.

Is there a way I can get a better Error message? it is currently empty

[xynydev]

Surprised to see this stale. I won't look at this now, but will try to take a look later. @fiftydinar might also know something.

[fiftydinar]

I don't get notifications for GH discussions so I didn't see it. And I rarely visit it.

Maybe he used the default cosign key from template repo or maybe cosign key didn't generate properly.
I'm not sure what else would be the issue.

[xynydev]

The error message I'm seeing in the repo is a cosign issue, yeah. Maybe try merging the live branch to the main branch, and regenerating the keys. @boredsquirrel