12:39 <BazilObolensky[m> Hi all! I'm trying to figure out how to add GpgSignature to my coreos-like system. I'm using coreos-assembler (cosa) to build it and it creates new ostree commit that is unsigned. I tried to pass my gpg key to rpm-ostree treefile and now cosa build signs new commit but rpm-ostree status still shows that my system is unsigned. Have some someone faced same issue? Sorry if it's trivial question I'm a total newbie with coreos.

12:40 <BazilObolensky[m> * if it's a trivial question

13:12 <BazilObolensky[m> * Hi all! I'm trying to figure out how to add GpgSignature to my coreos-like system. I'm using coreos-assembler (cosa) to build it and it creates new ostree commit that is unsigned. I tried to pass my gpg key to rpm-ostree treefile and now cosa build signs new commit but rpm-ostree status still shows that my system is unsigned. Has some someone faced same issue? Sorry if it's a trivial question I'm a total newbie with coreos.

13:33 <dustymabe> BazilObolensky[m: for our pipeline after the `cosa build ostree` step we call something in fedora infra to sign the commit and then re-export that back into the oci-archive

13:33 <dustymabe> https://github.com/coreos/coreos-assembler/blob/main/src/cmd-sign#L104

13:34 <dustymabe> you should just be able to do the signing yourself (i.e. you don't need to call fedora infra for that), but you'll still need to re-export to an oci archive I think

13:34 <dustymabe> there might be an easier way that someone else knows about

13:59 <dustymabe> walters: there virtiofs stuff is just blocked on that one PR because of the locked down env we run our pipeline in, right? if I wanted to carry that patch locally I can just develop using that for the time being?

13:59 <walters> dustymabe: yes and yes I believe

13:59 <dustymabe> cool - thanks!

15:27 <baude> bgilbert, I consider https://github.com/coreos/ignition/pull/1555 to be complete now ... do you agree? I'm going to go through the rest of the checklist and double check things. I know I need to document usage but have been waiting for the aforementioned PR goes in so I can do that exercise once.

16:36 <bgilbert> baude: I have not had a chance to get back to that PR yet, unfortunately

17:01 <dustymabe> bgilbert: so nothing outstanding for baude - ball in bgilbert court ?

17:01 <bgilbert> AFAIK yes

17:01 <dustymabe> +1

19:37 <dustymabe> gursewak: can you look at updating the new website for the kubevirt images we're going to be publishing?

19:39 <dustymabe> gursewak: also - do you want to review https://github.com/coreos/fedora-coreos-pipeline/pull/860 again?

19:47 <dustymabe> jlebon: mind a review on suggested tags to delete from our quay repo? the ones with the `*` are the ones I'm suggesting we delete: https://hackmd.io/qjjaGS3PSR2eDVWErXoWMw

19:59 <jlebon> dustymabe: LGTM

20:02 <dustymabe> jlebon: are you good with me deleting all tags from the staging repo? https://quay.io/repository/coreos-assembler/staging?tab=tags ?

20:03 <dustymabe> they are meant to be intermediate tags, but sometimes the process fails in the middle

20:04 <jlebon> dustymabe: SGTM. ideally we'd have the build-cosa job clean up stale tags too

20:05 <dustymabe> yeah. it doesn't happen often, <15 t imes in last 8 months

20:05 <dustymabe> would be good to fix that but $otherthings are probably more important

20:06 <dustymabe> ok when the current `testing` run completes I'm going to merge the --allow-rerun-success PRs and also the registry_repos PRs

20:07 <dustymabe> which means we should be creating kubevirt artifacts in builds starting from tomorrow and pushing to quay

20:07 <dustymabe> once we backport the --allow-rerun-success PR we can then start to pass --allow-rerun-success tags=needs-internet to our calls to kola

20:08 <dustymabe> which will hopefully help with flakes

20:16 <jlebon> +1 nice

21:26 <dustymabe> spresti[m]: looks like the `testing` build is progressing nicely. I'll check back in later here to see if you need anything from me.

21:26 <dustymabe> for now I need to run do kid stuff

22:06 <spresti[m]> Ok sounds great!

22:06 <spresti[m]> Thanks

22:07 <spresti[m]> * Thank you!

23:41 <spresti[m]> When someone can approve this rollout https://github.com/coreos/fedora-coreos-streams/pull/703

23:42 <spresti[m]> Scheduled for 48 hrs at 12am tmr utc