podvm-mkosi: build s390x fedora image with SE enabled

confidential-containers / cloud-api-adaptor

Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

Apache License 2.0

44 stars 71 forks source link

podvm-mkosi: build s390x fedora image with SE enabled #1818

Closed genjuro214 closed 2 months ago

genjuro214 commented 2 months ago

Refer to build-s390x-se-image.sh for building ubuntu image. Use mkosi to update initrd image, instead of update-initramfs which is not supported on fedora.

Need download host keys according to SECURE_EXECUTION.md, and set key folder path in env HOST_KEYS_DIR

Run make image to build production image with SE enabled.