Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RFE] Verify image signature #3

Open
alban opened this issue May 13, 2024 · 0 comments
Open

[RFE] Verify image signature #3

alban opened this issue May 13, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@alban
Copy link
Member

alban commented May 13, 2024

Current situation

Since inspektor-gadget/inspektor-gadget#2707, unsigned images are rejected by default, unless users specify --verify-image=false.

Impact

Third-party gadget based on gadget-template don't work by default.

Ideal future situation

Ideally:

  • gadget-template should contain the necessary templates to create keys and to sign the images.
  • The Makefile just works, without pushing gadget authors to add a workaround with --verify-image=false.
  • gadget-template's README.md contains explanations for users how to find the key. So gadget authors don't have too much work to do when they use gadget-template for their gadgets.

Implementation options

Additional information

cc @eiffel-fl

@alban alban added the enhancement New feature or request label May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant