veilor-org/veilor-os
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

bluebuild(recipe): drop signing module for first green build

Browse source
This commit is contained in:
claude-veilor-bot 2026-05-06 17:30:48 +01:00
parent 2c197796e3
commit 4966a65e37
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
bluebuild/recipe.yml
View file

@ -149,8 +149,9 @@ modules:
- veilor-postinstall.service - veilor-postinstall.service
- veilor-doctor.timer - veilor-doctor.timer
# ── 10. signing config ────────────────────────────────────────── # ── 10. signing — DEFERRED ──────────────────────────────────────
# bluebuild emits cosign.pub at root; CI uses the pinned key # The BlueBuild `type: signing` module expects a cosign.pub +
# generated for veilor-org. signed-by reference for bootc upgrade # cosign.key pair next to the recipe. Generate + ship those in a
# signature verification. # follow-up commit once the operator has rotated the key offline
- type: signing # and stashed cosign.key as a Forgejo Actions secret. Skip for the
# first green build.