Skip to content

Commit

Permalink
Simplify rebase instructions
Browse files Browse the repository at this point in the history
  • Loading branch information
samhclark committed Nov 8, 2024
1 parent 05c749a commit d81f5ab
Showing 1 changed file with 13 additions and 0 deletions.
13 changes: 13 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,19 @@ From another Silverblue based image, first, rebase onto the unsigned image.
rpm-ostree rebase ostree-unverified-registry:ghcr.io/samhclark/custom-silverblue:41
```

Optional: Verify that the image you just rebased onto is signed.


```
$ wget -O - https://raw.githubusercontent.com/samhclark/custom-silverblue/refs/heads/main/overlay-root/usr/etc/pki/cosign/cosign.pub \
| cosign verify --key /dev/stdin ghcr.io/samhclark/custom-silverblue@$( \
rpm-ostree status \
| head -n 7 \
| grep -o 'sha256:[a-f0-9]\{64\}' \
)
```

Reboot.
Then, after that, rebase onto the signed image.
This bootstrapping process helps get the public keys onto your machine
and makes sure everything is configured right.
Expand Down

0 comments on commit d81f5ab

Please sign in to comment.