[Question] Libvirt VMs when base container image has a policy defined

[nickryand]

This could very well be an issue with the way I'm holding the tool. I am trying bring up a libvirt VM off of a bootc image I built and installed a signature policy for the containers-storage transport. This seems to break the build. I think this is because containers-storage transport does not support signature storage. Should this actually work? I'm signing with the image cosign then pulling it locally to kick off the bcvk build. If this is not enough context let me know and I can answer any questions you might have.

[cgwalters]

This is a messy topic, I think you're right though. #166 is related to this...effectively in practice what we probably need to do is aim to support signature verification primarily for registry flows.

[nickryand]

Thank you for the response!