[Podman] Re: Chicken-and-egg problem with image signatures on CoreOS

On Mon, Jul 11, 2022, at 2:16 PM, Mark Raynsford via Podman wrote:

* Setting up a registry appears to require running unsigned code,

You can bootstrap your system by using pull-by-digest on the registry container, or more generally, all the infrastructure containers you need to get to your "phase 2" that uses signed containers.