Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate Cosign #8

Closed
usrbinkat opened this issue Nov 24, 2021 · 1 comment
Closed

Investigate Cosign #8

usrbinkat opened this issue Nov 24, 2021 · 1 comment
Assignees

Comments

@usrbinkat
Copy link
Member

https://github.com/sigstore/cosign

@jbpratt jbpratt transferred this issue from ContainerCraft/kc2 Dec 2, 2021
jbpratt added a commit that referenced this issue Dec 6, 2021
Investigating keyless signing of KMI (#8)

Signed-off-by: jbpratt <[email protected]>
@jbpratt jbpratt self-assigned this Dec 6, 2021
jbpratt added a commit that referenced this issue Dec 6, 2021
Investigating keyless signing of KMI (#8)

Signed-off-by: jbpratt <[email protected]>
jbpratt added a commit that referenced this issue Dec 6, 2021
Investigating keyless signing of KMI (#8)

Signed-off-by: jbpratt <[email protected]>
Co-authored-by: usrbinkat <[email protected]>
@jbpratt
Copy link
Collaborator

jbpratt commented Dec 7, 2021

closing this out, images will now be signed in the promotion process. We can't use quay.io until it is updated to 3.6 (sigstore/cosign#40 (comment))

@jbpratt jbpratt closed this as completed Dec 7, 2021
usrbinkat added a commit that referenced this issue Dec 13, 2021
* e2e-ci-testing

* e2e-ci-testing

* Update test.sh

* Update test.sh

* Update test.sh

* Update test.yml

* Update test.sh

* Update test.sh

* add virtctl download

* update test

* Rename test.sh~ to test.sh

* Update test.yml

* Update test.sh

* fail if not ready or count is over limit

format with shfmt

use local inside of functions

Signed-off-by: jbpratt <[email protected]>

* Update test.sh

* add ram to test vm

Signed-off-by: usrbinkat <[email protected]>

* change bash options outside of loop

Signed-off-by: jbpratt <[email protected]>

* enable qemu-guest-agent for ubuntu

Signed-off-by: jbpratt <[email protected]>

* fix sourcing flavor specific vars

pipeline was passing silently due to trying to enable
`--commands-from-file` as an operation.

Signed-off-by: jbpratt <[email protected]>

* force the cache to bust

Signed-off-by: jbpratt <[email protected]>

* pass in flavor and enable ssh test

Signed-off-by: jbpratt <[email protected]>

* swap to ubi-minimal

Signed-off-by: jbpratt <[email protected]>

* enable additional ubuntu flavors

Signed-off-by: jbpratt <[email protected]>

* add selinux workaround until fedora 35 bug is resolved

Signed-off-by: usrbinkat <[email protected]>

* extract customization into script

Signed-off-by: jbpratt <[email protected]>

* add update script and simplify index structure

Signed-off-by: jbpratt <[email protected]>

* experiment with cosign

Investigating keyless signing of KMI (#8)

Signed-off-by: jbpratt <[email protected]>
Co-authored-by: usrbinkat <[email protected]>

* build debian 10 and 11

Signed-off-by: jbpratt <[email protected]>

* enable to promote ubuntu matrix

Signed-off-by: jbpratt <[email protected]>

* disable debian and most ubuntu for testing

Signed-off-by: jbpratt <[email protected]>

* build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* fixup! build openSUSE leap 15 and tumbleweed

Signed-off-by: jbpratt <[email protected]>

* enable everything for testing and promotion

Signed-off-by: jbpratt <[email protected]>

* remove owners file from upstream

Signed-off-by: jbpratt <[email protected]>

* build rhcos 4.9

need to be able to skip customization and unarchive the download

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* fixup! build rhcos 4.9

Signed-off-by: jbpratt <[email protected]>

* re-testing opensuse

Signed-off-by: usrbinkat <[email protected]>

* try pre-sparsify

Signed-off-by: usrbinkat <[email protected]>

* try pre-sparsify

Signed-off-by: usrbinkat <[email protected]>

* re-try centos9 build

Signed-off-by: usrbinkat <[email protected]>

* upgrade host before build

Signed-off-by: usrbinkat <[email protected]>

* retry opensuse with update and upgrade on host

Signed-off-by: usrbinkat <[email protected]>

* retry opensuse with update and upgrade on host

Signed-off-by: usrbinkat <[email protected]>

* build fcos 35

Signed-off-by: jbpratt <[email protected]>

* fixup! build fcos 35

Signed-off-by: jbpratt <[email protected]>

* fixup! build fcos 35

Signed-off-by: jbpratt <[email protected]>

* fixup! build fcos 35

Signed-off-by: jbpratt <[email protected]>

* fixup! build fcos 35

Signed-off-by: jbpratt <[email protected]>

* fixup! build fcos 35

Signed-off-by: jbpratt <[email protected]>

* fixup! build fcos 35

Signed-off-by: jbpratt <[email protected]>

* implement testing with bats

Signed-off-by: jbpratt <[email protected]>

* fixup! implement testing with bats

Signed-off-by: jbpratt <[email protected]>

* fixup! implement testing with bats

Signed-off-by: jbpratt <[email protected]>

* fixup! implement testing with bats

Signed-off-by: jbpratt <[email protected]>

* bump kubevirt version

Signed-off-by: jbpratt <[email protected]>

* Revert "bump kubevirt version"

This reverts commit 4547d0e.

* add oci image-spec labels

* pre-merge cleanup

Signed-off-by: usrbinkat <[email protected]>

* set correct suse version and fix labels

Signed-off-by: usrbinkat <[email protected]>

* temporarily disable fcos-35 and f35 ssh tests

Signed-off-by: usrbinkat <[email protected]>

Co-authored-by: jbpratt <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants