Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create backup trusted container signing keys #703

Open
p5 opened this issue Jan 9, 2025 · 0 comments
Open

Create backup trusted container signing keys #703

p5 opened this issue Jan 9, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@p5
Copy link
Member

p5 commented Jan 9, 2025

github.com/containers/image now supports multiple Sigstore container keys to be trusted for a single registry.

We should create a new keypair, ideally with the private key stored in a separate location to the existing one, and configure Podman to trust this new public key alongside the current one. This allows us to seamlessly rotate keys in the event of a leak/compromise.

Here's how I implemented it on my custom image
rsturla/eternal-main@8a579ee

@p5 p5 changed the title Backup trusted container signing keys Create backup trusted container signing keys Jan 9, 2025
@dosubot dosubot bot added the enhancement New feature or request label Jan 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant