fix: image signing script

An overlay might support multiple SBC's from a single image. No point in trying to sign an already signed image. So select images to sign unique by image name. Signed-off-by: Noel Georgi <[email protected]>
siderolabs · Mar 18, 2024 · 2aad9ab · 2aad9ab
1 parent 61e6760
commit 2aad9ab
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/hack/scripts/sign-images.sh b/hack/scripts/sign-images.sh
@@ -2,7 +2,7 @@
 
 set -euo pipefail
 
-EXTERNAL_OVERLAY_IMAGES=$(crane export "${OVERLAYS_IMAGE_REF}" | tar x --to-stdout overlays.yaml | yq '.overlays[] | .image + "@" + .digest')
+EXTERNAL_OVERLAY_IMAGES=$(crane export "${OVERLAYS_IMAGE_REF}" | tar x --to-stdout overlays.yaml | yq '.overlays | unique_by(.image) | .[] | .image + "@" + .digest')
 OVERLAY_IMAGE_DIGEST=$(crane digest "${OVERLAYS_IMAGE_REF}")
 
 for IMAGE in ${EXTERNAL_OVERLAY_IMAGES} ${OVERLAYS_IMAGE_REF}@${OVERLAY_IMAGE_DIGEST}; do