You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is no official source to grab a container image for Fulcio right now. Having published and signed container images in GHCR will allow for them to be used in the public good instance and also by independent operators instead of building from source.
Why Github container registry?
I think github makes the images more easily discoverable for independent operators than google container registry. I'll file a ticket to publish rekor images there to so they match if folks think this is the right approach
Other considerations
To support PKCS#11 users we need to have an image with CGO enabled / glibc support (based on e.g distroless debian), but I think its worth also supporting a scratch version
The text was updated successfully, but these errors were encountered:
Description
There is no official source to grab a container image for Fulcio right now. Having published and signed container images in GHCR will allow for them to be used in the public good instance and also by independent operators instead of building from source.
Why Github container registry?
I think github makes the images more easily discoverable for independent operators than google container registry. I'll file a ticket to publish rekor images there to so they match if folks think this is the right approach
Other considerations
To support PKCS#11 users we need to have an image with CGO enabled / glibc support (based on e.g distroless debian), but I think its worth also supporting a scratch version
The text was updated successfully, but these errors were encountered: