Skip to content

Comments

flatcar-install: update public key#25

Merged
t-lo merged 1 commit intoflatcar-masterfrom
kai/update-subkey
Sep 2, 2020
Merged

flatcar-install: update public key#25
t-lo merged 1 commit intoflatcar-masterfrom
kai/update-subkey

Conversation

@pothos
Copy link
Member

@pothos pothos commented Aug 31, 2020

The current subkey will expire soon and a new one was generated.

How to use

Run flatcar-install for a version signed with the new subkey.

Testing done

None

The current subkey will expire soon and a new one was generated.
@pothos pothos requested a review from a team August 31, 2020 11:05
@vbatts
Copy link
Member

vbatts commented Sep 1, 2020

👍
Future: we need to revisit this workflow, so it's based more on trusting the public key of the root key, than the expiration of the subkeys. But for now at least we're rotating this before it expires. And this only would affect the install script key, not the update-signing key.

Copy link
Member

@t-lo t-lo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you!

@t-lo t-lo merged commit b5a5bcc into flatcar-master Sep 2, 2020
@t-lo t-lo deleted the kai/update-subkey branch September 2, 2020 08:56
pothos added a commit to flatcar-archive/coreos-overlay that referenced this pull request Sep 14, 2020
This pulls in the new sub key for flatcar-install
flatcar/init#25
and a networkd unit to exclude Weave interfaces from DHCP
flatcar/init#22
and an update to two other networkd units which lacked a match section
that is mandatory in future systemd versions
flatcar/init#23
pothos added a commit that referenced this pull request Sep 14, 2020
flatcar-install: update public key by pothos
pothos added a commit to flatcar-archive/coreos-overlay that referenced this pull request Sep 14, 2020
This pulls in the new sub key for flatcar-install
flatcar/init#25
picked to a new flatcar-2512 branch in the "init" repository.
jepio pushed a commit that referenced this pull request Feb 21, 2022
dracut: fall back to expected dm-verity hash offset
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants