diff --git a/edge_custom_config.yaml.template b/.edge-custom-config.yaml.template similarity index 100% rename from edge_custom_config.yaml.template rename to .edge-custom-config.yaml.template diff --git a/Earthfile b/Earthfile index 5c169779..8d73df68 100644 --- a/Earthfile +++ b/Earthfile @@ -33,7 +33,7 @@ ARG ISO_NAME=installer ARG K8S_DISTRIBUTION ARG CUSTOM_TAG ARG CLUSTERCONFIG -ARG EDGE_CUSTOM_CONFIG=edge_custom_config.yaml +ARG EDGE_CUSTOM_CONFIG=.edge-custom-config.yaml ARG ARCH ARG DISABLE_SELINUX=true ARG CIS_HARDENING=true diff --git a/README.md b/README.md index 65dc5d2c..f856648a 100644 --- a/README.md +++ b/README.md @@ -138,6 +138,7 @@ cp .arg.template .arg | UKI_BRING_YOUR_OWN_KEYS | Bring your own public/private key pairs if this is set to true. Otherwise, CanvOS will generate the key pair. | boolean | `false` | | INCLUDE_MS_SECUREBOOT_KEYS | Include Microsoft 3rd Party UEFI CA certificate in generated keys | boolean | `true` | | AUTO_ENROLL_SECUREBOOT_KEYS | Auto enroll SecureBoot keys when device boots up and is in setup mode of secure boot | boolean | `true` | +| EDGE_CUSTOM_CONFIG | Path to edge custom configuration file | string | `.edge-custom-config.yaml` | 1. (Optional) If you are building the images behind a proxy server, you may need to modify your docker daemon settings to let it use your proxy server. You can refer this [tutorial](https://docs.docker.com/config/daemon/systemd/#httphttps-proxy). @@ -322,3 +323,26 @@ cp spectro-luet-auth.yaml.template spectro-luet-auth.yaml ```shell earthly --push +build-all-images ``` + +### Building Installer Image with public key for verifying signed content + +1. Copy the .edge.custom-config.yaml.template file to .edge.custom-config.yaml + +```shell +cp .edge.custom-config.yaml.template .edge.custom-config.yaml +``` + +2. Edit the property signing.publicKey in `.edge.custom-config.yaml` + +3. Include the following property in `.arg` file +``` +... + +EDGE_CUSTOM_CONFIG=/path/to/.edge.custom-config.yaml +``` + +4. Build the image using earthly installed on the host + +```shell +earthly --push +build-all-images +```