bluebuild(recipe): drop signing module for first green build
Some checks failed
Build veilor-os OCI (BlueBuild) / Build + push OCI (push) Failing after 3m32s
Some checks failed
Build veilor-os OCI (BlueBuild) / Build + push OCI (push) Failing after 3m32s
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
parent
1848239f7e
commit
92653cca50
1 changed files with 6 additions and 5 deletions
|
|
@ -149,8 +149,9 @@ modules:
|
||||||
- veilor-postinstall.service
|
- veilor-postinstall.service
|
||||||
- veilor-doctor.timer
|
- veilor-doctor.timer
|
||||||
|
|
||||||
# ── 10. signing config ──────────────────────────────────────────
|
# ── 10. signing — DEFERRED ──────────────────────────────────────
|
||||||
# bluebuild emits cosign.pub at root; CI uses the pinned key
|
# The BlueBuild `type: signing` module expects a cosign.pub +
|
||||||
# generated for veilor-org. signed-by reference for bootc upgrade
|
# cosign.key pair next to the recipe. Generate + ship those in a
|
||||||
# signature verification.
|
# follow-up commit once the operator has rotated the key offline
|
||||||
- type: signing
|
# and stashed cosign.key as a Forgejo Actions secret. Skip for the
|
||||||
|
# first green build.
|
||||||
Loading…
Reference in a new issue