This is a placeholder and details need to be filled in. The general idea is that a separate image will be created with only the BOM that the appliance used when retrieving the OCP images and storing in the appliance.iso. This image must be signed.

Details TODO.