[3407788534] Upstream Reporter: Dusty Mabe
Upstream issue status: Closed
Upstream description:

As part of https://github.com/coreos/fedora-coreos-tracker/issues/1969 we need to change our client systems to not check the OSTree commit signature (because there is no longer an OSTree commit signature) and switch them to verifying a signature of the container payload instead.

These signatures are being created by the pipeline when we do new releases:

• https://github.com/coreos/fedora-coreos-pipeline/pull/1211
• https://github.com/coreos/fedora-coreos-pipeline/pull/1218

We need to migrate systems over to using the container signature prior to the Fedora 43 rebase (where OSTree commit signatures no longer exist).