-
Bug
-
Resolution: Done-Errata
-
Major
-
rhel-10.0
-
None
-
redhat-release-10.0-20.el10
-
No
-
Low
-
rhel-emerging
-
10
-
None
-
QE ack, Dev ack
-
False
-
False
-
-
None
-
None
-
None
RHEL Containers on Konflux plan to introduce a new signing method in addition to traditional gpg signing for images published to registry.redhat.io and registry.access.redhat.com
A new signing key was generated for this service and passed review in SIGNSERVER-1394
To allow for verification on installed RHEL machines, we need to ship the public key component in redhat-release so that the container stack can include it in its policy.
This is currently scoped only to RHEL 10.0 GA, other releases may or may not introduce cosign validation at a later time.
- links to
-
RHBA-2024:139305 redhat-release bug fix and enhancement update