Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: add fix-key-and-update.sh script to resolve cosign pub key issues #298

Merged
merged 3 commits into from
Jul 2, 2024

Conversation

p5
Copy link
Member

@p5 p5 commented Jul 2, 2024

Thank you for contributing to the Universal Blue project!

Adds a script which can be executed by users who are on an image signed by an older cosign key pair.

@p5
Copy link
Member Author

p5 commented Jul 2, 2024

Doing one final pass in a VM, so please do not merge yet :)

Confirmed the script works in a VM, so we are good to go!

rpm-ostree update

# Clean up
rm /etc/containers/policy.json.bak
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it necessary to remove the backup file? If we are concerned about it being too generic, perhaps use a different backup filename, but seems like leaving it in place provides a means to rollback should that HAVE to happen?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point. Leaving the backup file in place
7dde7e0

@KyleGospo KyleGospo added this pull request to the merge queue Jul 2, 2024
Merged via the queue into main with commit 5c4144d Jul 2, 2024
4 checks passed
@KyleGospo KyleGospo deleted the add-signing-key-fix-script.sh branch July 2, 2024 23:58
krishbin pushed a commit to krishbin/ublue-config that referenced this pull request Jul 17, 2024
…ues (ublue-os#298)

* chore: add fix-key-and-update.sh script to resolve cosign pub key issues

* Remove x flag from script since we have echo commands

* Keep the backup file in place
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants