Currently the edpm-hardened-uefi image is already distributed inside a self-extracting container image. The openstack-baremetal-operator extracts it to be served via http to metal3 deployed hosts.

Distinct enhancements under this epic include

• Modifying ironic-python-agent to pull container images and extract a qcow2, see https://review.opendev.org/c/openstack/ironic-specs/+/933612
• Modifying metal3 if necessary to accept and pass through OCI registry URLs for images
• Modifying openstack-baremetal-operator to stop serving the qcow2 via http, and instead to pass a valid OCI registry URL to metal3
• Removing the self-extracting feature of edpm-hardened-uefi image so only the qcow2 is packaged