bootc-dev / bootc-dev/bootc

Provide more signature details in `status`

Open
#1,636 1 comment 0 reactions 0 assignees View on GitHub
area/skopeo-podman enhancement triaged
Dominant language
Rust
Stars
2.3k
Forks
230
Avg merge
3d 12h
Merged PRs (30d)
38

Description

I just started signing my bootc image for my workstation and using `--enforce-container-sigpolicy`, and expected to see in the `status` output something similar to rpm-ostree's "Valid signature by ...".

I suspect that would require work in the skopeo proxy to be able to also get the signature info out of c/image when pulling an image and storing that somewhere under `/var`. Or store it in whatever usual place c/storage stores it (e.g. `/var/lib/containers/sigstore`), though that might be awkward to do since we're not actually importing into c/storage. (Obviously related to https://github.com/bootc-dev/bootc/issues/20.)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.