From da4c14967e4ba64953b8309069c9788a740b9f4e Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Tue, 28 Jun 2022 10:20:34 -0700 Subject: [PATCH] robosignatory: enable ima signing for f37 Signed-off-by: Kevin Fenzi --- roles/robosignatory/templates/robosignatory.toml.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/robosignatory/templates/robosignatory.toml.j2 b/roles/robosignatory/templates/robosignatory.toml.j2 index 9c0cb1c990..159deb4e27 100644 --- a/roles/robosignatory/templates/robosignatory.toml.j2 +++ b/roles/robosignatory/templates/robosignatory.toml.j2 @@ -153,8 +153,8 @@ handlers = ["console"] key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}" keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}" {% if env == "production" %} - # ima file signing - disable for now per fesco - # file_signing_key = "fedora-files-2021" + # ima file signing - enabled in f37 + file_signing_key = "fedora-37-ima" {% endif %} [consumer_config.koji_instances.primary.tags.sidetags]