Background

Update the Intel SGX DCAP registration flow containerfile to use UBI 10 as the base image instead of UBI 9. This migration is a prerequisite for the Konflux build implementation and ensures alignment with latest Red Hat base image standards.

Current State

• Current Base Image: Red Hat Universal Base Image (UBI) 9
• Target Base Image: Red Hat Universal Base Image (UBI) 10
• Container Location: https://github.com/openshift/confidential-compute-artifacts/tree/main/containerfiles/dcap-registration-flow

Migration Requirements

• Update Containerfile FROM statement from UBI 9 to UBI 10
• Verify compatibility of Intel SGX DCAP components with UBI 10
• Ensure Intel SGX repository packages work correctly on UBI 10
• Validate PCK ID retrieval tool functionality
• Test registration flow script execution

Technical Considerations

• Verify Intel SGX RPM repository compatibility with UBI 10
• Ensure Intel SGX repository key import works correctly
• Test SGX PCK ID retrieval tool installation and functionality
• Validate custom registration flow script execution
• Check for any UBI 10 specific package dependencies

Acceptance Criteria

• [ ] Containerfile updated to use UBI 10 base image
• [ ] Container builds successfully with all dependencies
• [ ] Intel SGX DCAP components install correctly
• [ ] PCK ID retrieval tool functions properly
• [ ] Registration flow script executes without errors
• [ ] All existing functionality preserved
• [ ] Container passes security scans
• [ ] Documentation updated to reflect UBI 10 usage

Dependencies

• This story is a prerequisite for KATA-4168 (Konflux build implementation)
• Access to UBI 10 base images
• Intel SGX repository compatibility verification