brew install cosignbrew install cranekind create cluster --image=kindest/node:v1.24.0brew install cosignbrew install cranekind create cluster --image=kindest/node:v1.24.0idea
crfs
| curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add - | |
| echo "step1" | |
| echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list | |
| echo "kubeadm install" | |
| sudo apt update -y | |
| sudo apt -y install vim git curl wget kubelet=1.24.3-00 kubeadm=1.24.3-00 kubectl=1.24.3-00 | |
| echo "memory swapoff" | |
| sudo sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab | |
| sudo swapoff -a | |
| sudo modprobe overlay |
| # Set the tag | |
| VERSION=v20220513-16d73c5543 | |
| # Get the digest for the amd64 image | |
| DIGEST=$(crane manifest gcr.io/tekton-nightly/github.com/tektoncd/pipeline/cmd/controller:${VERSION} | jq -r '.manifests[] | select(.platform.architecture=="amd64") | .digest') | |
| # Download the SBOM | |
| cosign download sbom gcr.io/tekton-nightly/github.com/tektoncd/pipeline/cmd/controller@${DIGEST} | |
| Found SBOM of media type: text/spdx | |
| SPDXVersion: SPDX-2.2 |
| package main | |
| import ( | |
| "fmt" | |
| "github.com/anchore/syft/syft" | |
| "github.com/anchore/syft/syft/format" | |
| "github.com/anchore/syft/syft/sbom" | |
| "github.com/anchore/syft/syft/source" | |
| ) |
| #!/bin/bash | |
| set -e | |
| function usage(){ | |
| echo "$(basename $0) --registry registry.gitlab.com/images --platform linux/amd64 --chart fluent/fluent-bit --version 0.19.10" >&2 | |
| } | |
| function teardown { | |
| rm -rf "./tmp" |
| defaultBaseImage: gcr.io/imjasonh/combined |
Based on this blogpost.
To sign Git commits, you need a gpg key. GPG stands for GNU Privacy Guard and is the de facto implementation of the OpenPGP message format. PGP stands for ‘Pretty Good Privacy’ and is a standard to sign and encrypt messages.
Install with Homebrew:
$ brew install gpgLima (Linux virtual machines, on macOS) installation guide for M1 Mac.
Sep. 27th 2021 UPDATED
Now we can install patched version of QEMU via Homebrew (thank you everyone for the info!). Here is the updated instruction with it:
Used M1 Mac mini 2020 with macOS Big Sur Version 11.6.