Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

s390x: generate GPG keys for Ignition config protection #3055

Merged
merged 3 commits into from
Feb 16, 2023
Merged

s390x: generate GPG keys for Ignition config protection #3055

merged 3 commits into from
Feb 16, 2023

Commits on Feb 16, 2023

  1. s390x: generate GPG keys for Ignition config protection 

    During `cosa buildextend-secex` a pair of GPG keys is randomly generated,
where private key becomes part of `sdboot` image, and public key becomes
part of build artifacts.

User than can encrypt his Ignition config:
```
gpg --recipient-file /path/to/ignition.gpg.pub --output /path/to/config.ign.gpg --armor --encrypt /path/to/config.ign
```

And attach it to `qemu-kvm` as a disk:
```
-drive if=none,id=ignition,format=raw,file=/path/to/config.ign.gpg,readonly=on \
-device virtio-blk,serial=ignition.gpg,iommu_platform=on,drive=ignition
```
    @nikita-dubrovskii
    nikita-dubrovskii committed Feb 16, 2023
    Configuration menu
    Copy the full SHA
    8ea52d9 View commit details
    Browse the repository at this point in the history

  2. s390x: add ignition-gpg-key to schema 

    Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
    @nikita-dubrovskii
    nikita-dubrovskii committed Feb 16, 2023
    Configuration menu
    Copy the full SHA
    316dfaa View commit details
    Browse the repository at this point in the history

  3. s390x: support Ignition private key for official builds 

    Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com>
    @nikita-dubrovskii
    nikita-dubrovskii committed Feb 16, 2023
    Configuration menu
    Copy the full SHA
    788f1c9 View commit details
    Browse the repository at this point in the history