qjoly

Keybase proof

I hereby claim:

• I am qjoly on github.
• I am thebidouilleur (https://keybase.io/thebidouilleur) on keybase.
• I have a public key ASD3FnvUS9qAS-fKUP0qn0vmLUMqM6fXPUvpuTqcV11aRwo

To claim this, I am signing this object:

qjoly

FROM rockylinux/rockylinux:9

ENV HTTP_PROXY "http://proxy.infra.dgfip:3128"
ENV HTTPS_PROXY "http://proxy.infra.dgfip:3128"

RUN [ ! -f /usr/sbin/init ] && dnf -y install systemd;

RUN ([ -d /lib/systemd/system/sysinit.target.wants ] && cd /lib/systemd/system/sysinit.target.wants/ && for i in *; do [ $i == \
systemd-tmpfiles-setup.service ] || rm -f $i; done); \
rm -f /lib/systemd/system/multi-user.target.wants/*;\

qjoly

I have many Docker images to maintain (mostly personal projects) but I have no way of verifying the authenticity of my images. To add an extra layer of security, I decided to POC the use of Cosign.

There are many alternatives, but some require the maintenance of a key management server or are just less popular than Cosign.

Requirements

• Cosign (v2.4.0)
• Docker (v24.0.5)

Generate a cosign signature

qjoly

apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
kind: ProxmoxCluster
metadata:
  name: proxmox-cluster
  namespace: default
spec:
  schedulerHints:
    memoryAdjustment: 0
  allowedNodes:
  - homelab-proxmox-02