fix: ➕ Updated to install cosign from package

.github/workflows/build.yml

@@ -15,7 +15,7 @@ on:
       - '**.md'
       - '**.txt'
 env:
-  IMAGE_BASE_NAME: ironman-ublue
+  IMAGE_BASE_NAME: ironman-ubuntu
   IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }}
 
 jobs:

.gitignore

@@ -0,0 +1 @@
+cosign.key

Containerfile

@@ -7,10 +7,6 @@ LABEL com.github.containers.toolbox="true" \
       summary="Base image for creating Ubuntu toolbox containers" \
       maintainer="Ievgen Popovych <[email protected]>"
 
-# Remove apt configuration optimized for containers
-# Remove docker-gzip-indexes to help with "command-not-found"
-RUN rm /etc/apt/apt.conf.d/docker-gzip-indexes /etc/apt/apt.conf.d/docker-no-languages
-
 # Enable myhostname nss plugin for clean hostname resolution without patching
 # hosts (at least for sudo), add it right after 'files' entry. We expect that
 # this entry is not present yet. Do this early so that package postinst (which
@@ -33,18 +29,20 @@ RUN sed -Ei '/apt-get (update|upgrade)/s/^/#/' /usr/local/sbin/unminimize && \
     install -D -o root -g root -m 644 packages.microsoft.gpg /etc/apt/keyrings/packages.microsoft.gpg && \
     sh -c 'echo "deb [arch=amd64,arm64,armhf signed-by=/etc/apt/keyrings/packages.microsoft.gpg] https://packages.microsoft.com/repos/code stable main" > /etc/apt/sources.list.d/vscode.list' && \
     rm -f packages.microsoft.gpg && \
+    wget https://github.com/sigstore/cosign/releases/download/v2.0.0/cosign_2.0.0_amd64.deb -O /root/cosign.deb && \
+    dpkg -i /root/cosign.deb && \
+    rm -f /root/cosign.deb && \
     DEBIAN_FRONTEND=noninteractive apt -y install apt-transport-https && \
     apt update && \
     DEBIAN_FRONTEND=noninteractive apt install -y code && \
     rm -rd /var/lib/apt/lists/*
 RUN rm /extra-packages
 
 # Fix empty bind-mount to clear selinuxfs (see #337)
-RUN mkdir /usr/share/empty
+# RUN mkdir /usr/share/empty
 
 # Add flatpak-spawn to /usr/bin
-RUN ln -s /usr/libexec/flatpak-xdg-utils/flatpak-spawn /usr/bin/ && \
-    ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/docker && \
-      ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/flatpak && \ 
-      ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/podman && \
-      ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/rpm-ostree
+RUN ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/docker && \
+    ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/flatpak && \ 
+    ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/podman && \
+    ln -fs /usr/bin/distrobox-host-exec /usr/local/bin/rpm-ostree

cosign.pub

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELfEsLtL1HeynHy0jGblEIZTycMl6
+Z0sUhBJ9PlfJU/bHUoFn/ZmdaefHv0ZtsriyzY1eET7eF6izQYZ6IS5BJg==
+-----END PUBLIC KEY-----

extra-packages

@@ -7,7 +7,6 @@ zip
 curl
 flatpak-xdg-utils
 btop
-cosign
 ffmpeg
 duf
 bat