mirror of
https://github.com/flatcar/scripts.git
synced 2025-12-22 17:52:12 +01:00
Generate an ephemeral sysext signing key, that is injected into the image's sysext root of trust. All OS-dependent sysexts will be signed by this key and the private key (stored in /tmp) will be discarded on SDK container exit. Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>