feat: add ublue-os public signing key to fedora-coreos images

Since the fedora-coreos images built here specifically are built with
our custom kmod builds of nvidia and zfs, the public signing key should
be provided to provide those users the ability to easily import the key
as a MOK should they wish to run SecureBoot
This commit is contained in:
Benjamin Sherman
2024-01-19 18:13:50 -06:00
parent 01323b3115
commit fd4ea2b275
2 changed files with 4 additions and 1 deletions

View File

@@ -9,6 +9,7 @@ ARG NVIDIA_TAG="${NVIDIA_TAG}"
ARG ZFS_TAG="${ZFS_TAG}"
ARG KMOD_SRC="${KMOD_SRC:-ghcr.io/ublue-os/ucore-kmods:${COREOS_VERSION}}"
COPY --from=${KMOD_SRC} /rpms/kmods/*.rpm /tmp/rpms/
COPY --from=${KMOD_SRC} /rpms/kmods/nvidia/*.rpm /tmp/rpms/nvidia/
COPY --from=${KMOD_SRC} /rpms/kmods/zfs/*.rpm /tmp/rpms/zfs/

View File

@@ -23,7 +23,9 @@ sed -i 's@enabled=1@enabled=0@g' /etc/yum.repos.d/fedora-cisco-openh264.repo
# inspect to see what RPMS we copied in
find /tmp/rpms/
## CONDITIONAL: install ZFS (and sanoid deps)
rpm-ostree install /tmp/rpms/ublue-os-ucore-addons-*.rpm
## CONDITIONAL: install ZFS
if [[ "-zfs" == "${ZFS_TAG}" ]]; then
rpm-ostree install pv /tmp/rpms/zfs/*.rpm
# for some reason depmod ran automatically with zfs 2.1 but not with 2.2