chore: add backup trusted container signing key (#241)

rsturla · Dec 31, 2024 · 8a579ee · 8a579ee
1 parent 30ebc11
commit 8a579ee
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/files/_base/etc/containers/policy.json b/files/_base/etc/containers/policy.json
@@ -23,7 +23,10 @@
             "ghcr.io/rsturla/eternal-linux": [
                 {
                     "type": "sigstoreSigned",
-                    "keyPath": "/etc/pki/containers/eternal-linux.pub",
+                    "keyPaths": [
+                        "/etc/pki/containers/eternal-linux.pub",
+                        "/etc/pki/containers/eternal-linux-backup.pub"
+                    ],
                     "signedIdentity": {
                         "type": "matchRepository"
                     }

diff --git a/files/_base/etc/pki/containers/eternal-linux-backup.pub b/files/_base/etc/pki/containers/eternal-linux-backup.pub
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyl3Gw2GjuPfpabv2QsOlzkTELBVU
+7sewvHzJ2j2utW7KvSL96T3RqTgWhlk3eTY186/Hq3f9OpsvlCFEzhPnQQ==
+-----END PUBLIC KEY-----