[Podman] Re: Chicken-and-egg problem with image signatures on CoreOS
On Mon, Jul 11, 2022, at 2:16 PM, Mark Raynsford via Podman wrote:
* Setting up a registry appears to require running unsigned code,
You can bootstrap your system by using pull-by-digest on the registry container, or more
generally, all the infrastructure containers you need to get to your "phase 2"
that uses signed containers.