Basic signing for Hydra artifacts #15

Closed
opened 2024-07-03 21:02:15 +00:00 by delroth · 1 comment
Owner

Currently Hydra does not sign anything, we should fix this. I think for now we can get away with a signing key managed by agenix and with no people that can decrypt it. Later I know we'd like to have something HSM-backed etc., but that's something that will need significant R&D work, so... later.

Currently Hydra does not sign anything, we should fix this. I think for now we can get away with a signing key managed by agenix and with no people that can decrypt it. Later I know we'd like to have something HSM-backed etc., but that's something that will need significant R&D work, so... later.
delroth added this to the Bootstrap infra project 2024-07-03 21:02:15 +00:00
Author
Owner

Took care of this in f74d1ca0f6.

Took care of this in f74d1ca0f66d9231e558053d499b382ad7ad33b6.
Sign in to join this conversation.
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: the-distro/infra#15
No description provided.