From f44ec21e2d5a38e492030867076796e3c9c150cf Mon Sep 17 00:00:00 2001
From: spaceoden <26421479+spaceoden@users.noreply.github.com>
Date: Sun, 1 Dec 2024 21:01:15 +0000
Subject: [PATCH] feat: install_secureblue rebases to signed image if used on
 secureblue (#629)

---
 install/install_secureblue.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/install_secureblue.sh b/install/install_secureblue.sh
index b278ae1..17c3c09 100644
--- a/install/install_secureblue.sh
+++ b/install/install_secureblue.sh
@@ -76,6 +76,10 @@ image_name+="$additional_params-hardened"
 
 rebase_command="rpm-ostree rebase ostree-unverified-registry:ghcr.io/secureblue/$image_name:latest"
 
+if [ -n "$(rpm-ostree status | grep '● ostree-image-signed:docker://ghcr.io/secureblue/')" ] ; then
+    rebase_command="rpm-ostree rebase ostree-image-signed:docker://ghcr.io/secureblue/$image_name:latest"
+fi
+
 echo "Commands to execute:"
 echo "$rebase_command"
 echo ""