Skip to content

[Question] Libvirt VMs when base container image has a policy defined #274

Closed

Description

@nickryand

This could very well be an issue with the way I'm holding the tool. I am trying bring up a libvirt VM off of a bootc image I built and installed a signature policy for the containers-storage transport. This seems to break the build. I think this is because containers-storage transport does not support signature storage. Should this actually work? I'm signing with the image cosign then pulling it locally to kick off the bcvk build. If this is not enough context let me know and I can answer any questions you might have.

Activity

  1. cgwalters commented on May 21, 2026

    @cgwalters
    Collaborator

    This is a messy topic, I think you're right though. #166 is related to this...effectively in practice what we probably need to do is aim to support signature verification primarily for registry flows.

  2. nickryand commented on May 21, 2026

    @nickryand
    ContributorAuthor

    Thank you for the response!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions