From e4114fd6560fff842dbf9f5a71032d660aa2cb66 Mon Sep 17 00:00:00 2001 From: gerblesh <101901964+gerblesh@users.noreply.github.com> Date: Fri, 6 Oct 2023 02:49:56 -0700 Subject: [PATCH] fix: specify image name in policy.json (#176) There was talk on the discord about not being able to pull in images with podman because the signing policy included *every* image inside of the user's ghcr account. Which means that images not signed with the same key won't be able to be pulled down --- config/scripts/signing.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/scripts/signing.sh b/config/scripts/signing.sh index 5f0f0e3a8f..16b0ea853b 100644 --- a/config/scripts/signing.sh +++ b/config/scripts/signing.sh @@ -11,7 +11,7 @@ cp /usr/share/ublue-os/cosign.pub /usr/etc/pki/containers/"$IMAGE_NAME".pub FILE=/usr/etc/containers/policy.json yq -i -o=j '.transports.docker |= - {"'"$IMAGE_REGISTRY"'": [ + {"'"$IMAGE_REGISTRY"'/'"$IMAGE_NAME"'": [ { "type": "sigstoreSigned", "keyPath": "/usr/etc/pki/containers/'"$IMAGE_NAME"'.pub",