Including gpg keys in kiwi built image

[Alex Gooch]

Hey there! 

We are making progress with our ISO build but ran into a snag. We noticed that on our deployed VM, we are missing gpg-pubkeys (running rpm -qa | grep gpg).

The keys that we are wanting are located on our SUSE Manager Hub and we would like to pull them from there. I tried to add the following lines to config.sh:

rpm --import https://path/of/file.key

... but that did add the keys to the deployed image.

How can I include these keys in my ISO?

[Marcus Schäfer]

Hi,

> The keys that we are wanting are located on our SUSE Manager Hub and we
> would like to pull them from there. I tried to add the following lines
> to config.sh:
>
> rpm --import https://path/of/file.key
>
> ... but that did add the keys to the deployed image.
>
> How can I include these keys in my ISO?

There is the config-cdroot archive that you can use for this purpose.

So you can place a tar archive with filename "config-cdroot.tar.xz"
which is then used by kiwi and all data inside will be placed on
the ISO. This is usually used to place license files on the ISO but
you can place any data in the archive

Also see:

https://github.com/OSInside/kiwi/issues/737

Regards,
Marcus
--
Public Key available via: https://keybase.io/marcus_schaefer/key.asc
keybase search marcus_schaefer
-------------------------------------------------------
Marcus Schäfer Brunnenweg 18
Tel: +49 7562 905437 D-88260 Argenbühl
Germany
-------------------------------------------------------