commit 9219958b724549705327dbcf0aebc67c9e03fb47 parent 7c87607c7d0bcdf8e895a6262675838159e1c296 Author: MTRNord <MTRNord@users.noreply.github.com> Date: Thu, 9 Apr 2026 14:27:27 +0200 fix cosign versions Signed-off-by: MTRNord <MTRNord@users.noreply.github.com> Diffstat:
4 files changed, 16 insertions(+), 7 deletions(-)
diff --git a/apps/talos_cluster/image-builder/build-blog-cronjob.yaml b/apps/talos_cluster/image-builder/build-blog-cronjob.yaml @@ -38,7 +38,10 @@ spec: - -c - | set -eu - apk add --no-cache podman cosign git iptables >/dev/null + apk add --no-cache podman git iptables >/dev/null + + # Install cosign v3.0.6 + wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64 -O /tmp/cosign && chmod +x /tmp/cosign mkdir -p /etc/containers cat > /etc/containers/storage.conf << 'STORAGE_EOF' @@ -73,7 +76,7 @@ spec: echo "==> Digest: ${DIGEST}" COSIGN_PASSWORD="$(cat /cosign-secret/cosign.password)" \ - cosign sign --yes \ + /tmp/cosign sign --yes \ --key /cosign-secret/cosign.key \ --new-bundle-format=false \ --use-signing-config=false \ diff --git a/apps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml b/apps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml @@ -102,7 +102,10 @@ spec: - -c - | set -eu - apk add --no-cache podman cosign git iptables >/dev/null + apk add --no-cache podman git iptables >/dev/null + + # Install cosign v3.0.6 + wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64 -O /tmp/cosign && chmod +x /tmp/cosign mkdir -p /etc/containers cat > /etc/containers/storage.conf << 'STORAGE_EOF' @@ -139,7 +142,7 @@ spec: echo "==> Digest: ${DIGEST}" COSIGN_PASSWORD="$(cat /cosign-secret/cosign.password)" \ - cosign sign --yes \ + /tmp/cosign sign --yes \ --key /cosign-secret/cosign.key \ --new-bundle-format=false \ --use-signing-config=false \ diff --git a/apps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml b/apps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml @@ -50,7 +50,10 @@ spec: - -c - | set -eu - apk add --no-cache podman cosign git iptables >/dev/null + apk add --no-cache podman git iptables >/dev/null + + # Install cosign v3.0.6 + wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64 -O /tmp/cosign && chmod +x /tmp/cosign mkdir -p /etc/containers cat > /etc/containers/storage.conf << 'STORAGE_EOF' @@ -85,7 +88,7 @@ spec: echo "==> Digest: ${DIGEST}" COSIGN_PASSWORD="$(cat /cosign-secret/cosign.password)" \ - cosign sign --yes \ + /tmp/cosign sign --yes \ --key /cosign-secret/cosign.key \ --new-bundle-format=false \ --use-signing-config=false \ diff --git a/apps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml b/apps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml @@ -76,7 +76,7 @@ spec: echo "==> Digest: ${DIGEST}" COSIGN_PASSWORD="$(cat /cosign-secret/cosign.password)" \ - cosign sign --yes \ + /tmp/cosign sign --yes \ --key /cosign-secret/cosign.key \ --new-bundle-format=false \ --use-signing-config=false \