coreos / coreos-assembler

Tooling container to assemble CoreOS-like systems
https://coreos.github.io/coreos-assembler/
Apache License 2.0
330 stars 165 forks source link

cmd-sign: add `--verify-only` #3821

Closed jlebon closed 3 weeks ago

jlebon commented 3 weeks ago

This is useful to try to recover a build which was interrupted due to signing issues. E.g. the signing request went out, but Robosignatory never answered and the build failed.

If Robosignatory is eventually fixed and drains its queue, it eventually does sign the build. So we then can just pick up where we left off and verify the signatures and flip their ACLs.