Bug 1770037

Summary: (podman sign) does not handle multi-arch images
Product: Red Hat Enterprise Linux 8 Reporter: Miloslav Trmač <mitr>
Component: podmanAssignee: Jindrich Novy <jnovy>
Status: CLOSED ERRATA QA Contact: Yuhui Jiang <yujiang>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.3CC: bbaude, dwalsh, jligon, jnovy, lsm5, mheon, qiwan, tsweeney, umohnani, ypu
Target Milestone: rcKeywords: Extras
Target Release: 8.2Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: podman-3.0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-05-18 15:32:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Miloslav Trmač 2019-11-07 23:38:00 UTC
This bug was initially created as a copy of Bug #1768443

Comment 2 Miloslav Trmač 2019-11-07 23:39:06 UTC
AFAICS (podman sign) on a multi-arch image signs the manifest list, instead of the individual per-arch images (but using the top-level, possibly tagged, identity, not using a digest!)

Comment 3 Daniel Walsh 2019-11-08 11:04:13 UTC
Can you create a PR to fix this?

Comment 4 Daniel Walsh 2020-06-03 20:55:03 UTC
Lets assign this to qi.  Moved to HREL8

Comment 5 Daniel Walsh 2020-09-15 19:36:01 UTC
Qi have you made any progress on this?

Comment 8 Qi Wang 2020-12-10 21:23:05 UTC
https://github.com/containers/podman/pull/7718 PR to keep track of this.

Comment 9 Daniel Walsh 2021-01-29 10:58:37 UTC
Looks like this is fixed in podman 3.0

Comment 16 errata-xmlrpc 2021-05-18 15:32:02 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: container-tools:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1796