Skip to content

Add erofs support to apko. - #2249

Merged
smoser merged 33 commits into
chainguard-dev:mainfrom
smoser:feat/apko-erofs
Aug 18, 2026
Merged

smoser merged 33 commits into
chainguard-dev:mainfrom
smoser:feat/apko-erofs

erofs: fix what installing erofs-utils in CI exposed

32214b1
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Aug 18, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200487148392660833793124869747838065111631300327 (0x231e2797debf473550bb9d4f52e211f4675a86e7)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Aug 18 13:08:16 2026 UTC
            Not After : Aug 18 13:18:16 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    fb:62:84:59:a1:93:9e:80:e5:d9:0e:be:f0:3a:57:
                    05:eb:90:12:22:05:95:77:ec:c2:47:27:aa:3a:76:
                    72:df
                Y:
                    79:97:d2:79:eb:d4:02:5f:69:cd:03:80:06:0d:ef:
                    e9:00:ee:c9:cf:1e:53:ed:ce:37:e7:41:d1:a9:5b:
                    9d:7a
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                35:71:05:6C:CB:3E:9C:63:87:82:14:43:77:23:94:29:0C:1F:AC:31
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:scott-moser-work-v2@chainguard-workstations.iam.gserviceaccount.com
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoBT8o3IAAAQDAEcwRQIgf54XLl/1lr+qO3383dqTiIm4FENmg2znzfhKQEHyoVgCIQDg0fE0ojXp1YdwMn9BlnOZhwWRnuaxHsFPAvIPPwgnTA==

    Signature Algorithm: ECDSA-SHA384
         30:65:02:31:00:83:b8:81:14:bc:b7:1a:89:76:a8:d3:6e:0d:
         62:78:6b:35:2a:c2:09:42:19:ea:79:ec:cb:cc:10:15:9c:81:
         e8:01:8c:fe:73:d4:45:42:31:29:e7:90:80:4c:ea:af:aa:02:
         30:5c:2c:d8:37:47:db:d0:54:85:73:f3:1e:66:31:77:bb:b9:
         9f:78:32:fb:10:13:97:38:8e:7e:26:c8:89:02:6e:51:30:7d:
         3b:ca:d5:b4:c9:19:63:ce:e1:22:e2:30:94

Rekor Entry

Details
{
  "body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJhNjlmNjFlNzcyNjliNDI2Nzg5MzZhYWE2ZjhkOTU2NWJkN2NlMmVkMjg0OTBmODI1NWU1YmNjZTgxODYxNmIwIn19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJUUNtMWVHK2g5d0xmZUM2Y0ppczdnRlpSQWRHM3FaMFovajZqVnVuV0JsYTFRSWdRTTluNTBEalBwWHo3ZEFnR2FPRkVpNjBlS0gwSDMxVU1ObFJTT2VxV3g0PSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVUkpla05EUVhGdFowRjNTVUpCWjBsVlNYZzBibXc1Tmk5U2VsWlJkVFV4VUZWMVNWSTVSMlJoYUhWamQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDlFUlRSTlZFMTNUMFJGTWxkb1kwNU5hbGwzVDBSRk5FMVVUWGhQUkVVeVYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVVyTWt0RlYyRkhWRzV2Ukd3eVVUWXJPRVJ3V0VKbGRWRkZhVWxHYkZobWMzZHJZMjRLY1dwd01tTjBPVFZzT1VvMU5qbFJRMWd5Yms1Qk5FRkhSR1V2Y0VGUE4wcDZlRFZVTjJNME16VXdTRkp4Vm5Wa1pYRlBRMEZqWjNkblowaEZUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZPV0VWR0NtSk5jeXR1UjA5SVoyaFNSR1I1VDFWTFVYZG1ja1JGZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDFWUldVUldVakJTUVZGSUwwSkZZM2RTV1VaRVl6Sk9kbVJJVVhSaVZ6bDZXbGhKZEdReU9YbGhlVEV5VFd0Q2FtRkhSbkJpYldReFdWaEthd3BNV0dSMlkyMTBlbVJIUmpCaFZ6bDFZM2sxY0ZsWE1IVmFNMDVzWTI1YWNGa3lWbWhaTWs1MlpGYzFNRXh0VG5aaVZFRndRbWR2Y2tKblJVVkJXVTh2Q2sxQlJVSkNRblJ2WkVoU2QyTjZiM1pNTWtacVdUSTVNV0p1VW5wTWJXUjJZakprYzFwVE5XcGlNakIzUzNkWlMwdDNXVUpDUVVkRWRucEJRa05CVVdRS1JFSjBiMlJJVW5kamVtOTJUREpHYWxreU9URmlibEo2VEcxa2RtSXlaSE5hVXpWcVlqSXdkMHBSV1V0TGQxbENRa0ZIUkhaNlFVSkhRVkZZUkVKVmVBcE5WRkV3VFZSck5FNXFZM2xPVkUweVRXcEpNRTVFVFRKTlJHdDNaMWx2UjBOcGMwZEJVVkZDTVc1clEwSkJTVVZtUVZJMlFVaG5RV1JuUkdSUVZFSnhDbmh6WTFKTmJVMWFTR2g1V2xwNlkwTnZhM0JsZFU0ME9ISm1LMGhwYmt0QlRIbHVkV3BuUVVGQllVRlZMMHRPZVVGQlFVVkJkMEpJVFVWVlEwbElLMlVLUm5rMVpqbGFZUzl4YW5RNUwwNHpZV3MwYVVwMVFsSkVXbTlPY3pVNE16UlRhMEpDT0hGR1dVRnBSVUUwVGtoNFRrdEpNVFprVjBoalJFb3ZVVnBhZWdwdFdXTkdhMW8zYlhOU04wSlVkMHg1UkhvNFNVb3dkM2REWjFsSlMyOWFTWHBxTUVWQmQwMUVZVUZCZDFwUlNYaEJTVTgwWjFKVE9IUjRjVXBrY1dwVUNtSm5NV2xsUjNNeFMzTkpTbEZvYm5GbFpYcE1la0pCVm01SlNHOUJXWG9yWXpsU1JsRnFSWEExTlVOQlZFOXhkbkZuU1hkWVEzcFpUakJtWWpCR1UwWUtZeTlOWlZwcVJqTjFOMjFtWlVSTU4wVkNUMWhQU1RVclNuTnBTa0Z0TlZKTlNEQTNlWFJYTUhsU2JHcDZkVVZwTkdwRFZRb3RMUzB0TFVWT1JDQkRSVkpVU1VaSlEwRlVSUzB0TFMwdENnPT0ifX19fQ==",
  "integratedTime": 1787058496,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 2502997520,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2385419090\n0JfV0XeR62Uy8XvEvjJU+/iduU1DFueYPqzUInSdj+o=\n\n— rekor.sigstore.dev wNI9ajBFAiEA2KaaCEM9m2yY7uw+QY4I68AyUsZx8dbMruxO+ErRw7kCIHgmy1pqzetn0wX24MQrlRYHosPHel8la9APVwPEil4l\n",
      "hashes": [
        "7b2ba7b06f4acbe4cbb99c13ff9817c6c953909631276bac88ce929985a7f59d",
        "07b2f5b687316525cd657806d72e0ba03d1c15ab5abf0e5a28592cdfdab14ff1",
        "2b42a156bf1abc360aa5e197f80a6ca97203173c6b8a41ab4365eb6c3694998f",
        "d479daa5273591100bf1efdb31885bdb2137084fa29c7447cf33802330de698f",
        "da421d778fda833907af9f7ace319469888d91d7a816de1e034705de35d75edd",
        "372cc0dcd8126d4525fe6f32afa164827f11effba6f75f66e5156b5176e6b07d",
        "9d2591f58dba869762085de9c9ac73e174f68ffcf1eb02e15701b73a9949d0ef",
        "0a236025cea434d159261f15a500fff0e67756a4c4d08b951ddcf04918f2183e",
        "ada90ce7202b09f03aaeae9d9e8a92e444a85dfeb10c719f4dc5dfca8b6b9d8a",
        "45e31295ac6ed2442bf87812b0eb4b7ae9431e0e98ad6197561f2cbd41d60713",
        "47d6bb44b58efa2ac2dd4885269a23b704557d1f048b7d3de0cec0291121ba07",
        "42700643d8ff174c81044e394d418935d30075c2cd31c84cbd8e5eda88089c82",
        "842a2cd591f7717382f484e2ab9026c5d4745a7dbef023b4659b0713ec0686db",
        "f39925c748a06d35dac8d48f4174061c12aad4552b06b0d6f38cb006750ad70c",
        "93c17ceb2c56cfd82f640b7fed9ceefbb266387d0175f841234fccaa57e639e6",
        "f21247d21468595bafd14d4a1c9de477049faa131e8c76be158bca0681aaf04f",
        "88063ad66a161a9d8f757b24ca8c12bb8517c3d7fa6325c2b4771990c4b6365d",
        "8a61ebfef62d05772b20b45ea37e8cca03ff58284a773677a90d0bb15b5273b6",
        "11f6cc4f77f8dcd4a1638d72962ba7dabebe0e8d97f7dc2c385c061011cc70a6",
        "a4b9ff34bef6d9f953fd489ddeaeb1980273f9425fd69039e07252c1c333fb45",
        "4b046735f0b71c9578d2a54636333f0c5a241ef1035e58ca5b8eb270e0881981",
        "302bbbf35caf79099f2a86c9d95927d5179e10d758114037c6df3f698baca997",
        "d5d4998e908236957492702fcc14d4a97ce9c8616109a264834bc17fac834bfb",
        "f4f01ed906b107466eb42fd8f8740a0ba5a76a0f437fec866b4c58b91cf97f5c",
        "746c9f9d080d4fd98f88399eb8e68c9a22089f65d8ee49dc12043f9835b74895",
        "bc2c1407a1995fe90d8cd0369034aecd283fdebcf605528c099987c102091258",
        "d4e102d0a31e916af501ba480d85d808e5f37fa68af216002b4d54df2a66d22b",
        "ca04c6d3cbc1d841262503d746f1791f4e9395a73bd8090e0c434aecf8423e4c",
        "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
      ],
      "logIndex": 2381093258,
      "rootHash": "d097d5d17791eb6532f17bc4be3254fbf89db94d4316e7983eacd422749d8fea",
      "treeSize": 2385419090
    },
    "signedEntryTimestamp": "MEUCIDr0mxCnFG83G1sy+WEw4dzTSdp8LM2836w+d4h1QTglAiEAysuG1YKcy+tstz9fH5zq1L2XvvLN0RigCtLRgaYSW6k="
  }
}