flatcar-scripts

mirror of https://github.com/flatcar/scripts.git synced 2025-12-22 17:52:12 +01:00

History

Fix kernel module signing with ephemeral keys for official builds (#3493 )

* sdk: Fix ephemeral key directory paths baked into container images

The SDK container build process was persisting temporary directory
paths for module signing keys into /home/sdk/.bashrc. This caused
all container instances to share the same ephemeral key location.

Fixed by:
- Runtime check in sdk_entry.sh to recreate stale temp directories
- Build-time cleanup in Dockerfiles to remove the variables

Each container instance now gets unique temporary directories.

Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>

* sdk_entry: use persistent module signing keys for unofficial builds

For official builds (COREOS_OFFICIAL=1), continue using ephemeral
temporary directories for module signing keys.

For unofficial/development builds, use a persistent directory at
/mnt/host/source/.module-signing-keys to preserve keys across
container restarts.

Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>

---------

Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>

2025-11-20 09:56:49 +01:00

updates

update_chroot: fix transition to new os-release location

2014-07-14 17:59:15 -07:00

90_env_keep

sdk: Forward SIGNER environment variable

2022-06-03 14:59:26 +02:00

Dockerfile.lean-arch

sdk_lib: Silence some docker warnings

2025-03-21 14:16:03 +01:00

Dockerfile.sdk-build

Fix kernel module signing with ephemeral keys for official builds (#3493 )