feat(bootc): add enforce-container-sigpolicy for install (#2968)

This is a requirement for using bootc with Anaconda or else we don't
enforce signed images for subsequent updates.

In the past we have used bootc switch --mutate-in-place (in combination
with ostree-container which is what we are currently using for the
installation media), but this no longer works with bootc for whatever
reason.

This doesn't seem to matter for local builds, so this is fine to just
add here on the image.

xref: https://github.com/get-aurora-dev/iso/pull/93
This commit is contained in:
renner 2026-10-03 21:52:25 +02:00 committed by GitHub
parent 0ddd3ec7fc
commit cfc55e14af
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,2 +1,5 @@
[install]
root-fs-type = "btrfs"
# do not remove this, this is used during the installation for signed images
enforce-container-sigpolicy = true