Skip to content

Commit 043bb3f

Browse files
committed
fix: extend container policies
1 parent e653bc4 commit 043bb3f

File tree

1 file changed

+42
-7
lines changed

1 file changed

+42
-7
lines changed

build.sh

Lines changed: 42 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -58,13 +58,6 @@ cat << EOF > /etc/containers/policy.json
5858
}
5959
],
6060
"transports": {
61-
"docker-daemon": {
62-
"": [
63-
{
64-
"type": "insecureAcceptAnything"
65-
}
66-
]
67-
},
6861
"docker": {
6962
"ghcr.io/clemak27": [
7063
{
@@ -75,11 +68,53 @@ cat << EOF > /etc/containers/policy.json
7568
}
7669
}
7770
],
71+
"registry.access.redhat.com": [
72+
{
73+
"type": "signedBy",
74+
"keyType": "GPGKeys",
75+
"keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
76+
}
77+
],
78+
"registry.redhat.io": [
79+
{
80+
"type": "signedBy",
81+
"keyType": "GPGKeys",
82+
"keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
83+
}
84+
],
7885
"": [
7986
{
8087
"type": "insecureAcceptAnything"
8188
}
8289
]
90+
},
91+
"containers-storage": {
92+
"": [
93+
{
94+
"type": "insecureAcceptAnything"
95+
}
96+
]
97+
},
98+
"docker-daemon": {
99+
"": [
100+
{
101+
"type": "insecureAcceptAnything"
102+
}
103+
]
104+
},
105+
"oci": {
106+
"": [
107+
{
108+
"type": "insecureAcceptAnything"
109+
}
110+
]
111+
},
112+
"oci-archive": {
113+
"": [
114+
{
115+
"type": "insecureAcceptAnything"
116+
}
117+
]
83118
}
84119
}
85120
}

0 commit comments

Comments
 (0)