From cfc55e14afbca3c50b01ba84d0a1904c24459808 Mon Sep 17 00:00:00 2001
From: renner <80410025+renner0e@users.noreply.github.com>
Date: Sat, 3 Oct 2026 21:52:25 +0200
Subject: [PATCH] feat(bootc): add enforce-container-sigpolicy for install
 (#2968)

This is a requirement for using bootc with Anaconda or else we don't
enforce signed images for subsequent updates.

In the past we have used bootc switch --mutate-in-place (in combination
with ostree-container which is what we are currently using for the
installation media), but this no longer works with bootc for whatever
reason.

This doesn't seem to matter for local builds, so this is fine to just
add here on the image.

xref: https://github.com/get-aurora-dev/iso/pull/93
---
 system_files/shared/usr/lib/bootc/install/20-aurora.toml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/system_files/shared/usr/lib/bootc/install/20-aurora.toml b/system_files/shared/usr/lib/bootc/install/20-aurora.toml
index 55cc5088..0906b168 100644
--- a/system_files/shared/usr/lib/bootc/install/20-aurora.toml
+++ b/system_files/shared/usr/lib/bootc/install/20-aurora.toml
@@ -1,2 +1,5 @@
 [install]
 root-fs-type = "btrfs"
+
+# do not remove this, this is used during the installation for signed images
+enforce-container-sigpolicy = true