Skip to content

Commit

Permalink
Revert "Refer to the key in /usr/etc instead of /etc"
Browse files Browse the repository at this point in the history
This reverts commit 5f3a520.

The `unlinkat` error was caused by an old cosign.pub file which at the
immutable bit set on it. Because of that, and because the filesystem was
mounted read-only, I couldn't delete that ostree deployment.

The solution was to use a live USB to unlock LUKS, mount the filesystem
directly as writeable, remove the immutable bit, then reboot and run
`ostree admin cleanup`

Since that's resolved now and since it makes more sense to refer to /etc
instead of /usr/etc this is getting reverted.
  • Loading branch information
samhclark committed Nov 24, 2024
1 parent 5f3a520 commit b25f34a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion overlay-root/usr/etc/containers/policy.json
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"ghcr.io/samhclark": [
{
"type": "sigstoreSigned",
"keyPath": "/usr/etc/pki/cosign/cosign.pub",
"keyPath": "/etc/pki/cosign/cosign.pub",
"signedIdentity": {
"type": "matchRepository"
}
Expand Down

0 comments on commit b25f34a

Please sign in to comment.