Skip to content

This repository contains all my development packages preinstalled inside a Fedora Container image.

License

Notifications You must be signed in to change notification settings

kbdharun/dev-image

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

33 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

dev-image

Image GitHub License

This repository contains all my development packages preinstalled inside a Container image built using Vib.

Using the Container Image with Distrobox

Type the following command to create a container of this image in Distrobox:

distrobox create -n dev -i ghcr.io/kbdharun/dev-image:main

Tip

To create a rootful container, add the --root flag to the above command (i.e. distrobox create -n dev -i ghcr.io/kbdharun/dev-image:main --root).

Type the following command to enter the container:

distrobox enter dev

Verify the Container Image using Cosign

To verify the container image using cosign (download the cosign.pub file from here and execute the following command):

cosign verify --key cosign.pub ghcr.io/kbdharun/dev-image:main

Verify Image Build Provenance Attestation

All the image builds/pushes are attested for provenance and integrity using actions/attest-build-provenance. They can be verified by having the latest version of GitHub CLI installed in your system. Then, execute the following command:

gh attestation verify oci://ghcr.io/kbdharun/dev-image:main --owner kbdharun