ethanjli / forklift-toolbox

A Distrobox image for Forklift software development

forklift-toolbox

forklift-toolbox is an OCI image (automatically built on GitHub Actions) for Distrobox/Toolbx providing all dependencies necessary for developing the forklift software.

How to use

Instantiate

If you use distrobox:

distrobox create -i ghcr.io/ethanjli/forklift-toolbox -n forklift
distrobox enter forklift

If you use toolbx:

toolbox create -i ghcr.io/ethanjli/forklift-toolbox -c forklift
toolbox enter toolbox

Verification

These images are signed with Sigstore's cosign. You can verify the signature by downloading the cosign.pub key from this repo and running the following command:

cosign verify --key cosign.pub ghcr.io/ethanjli/forklift-toolbox

If you're forking this repo you should read the docs on keeping secrets in github. You need to generate a new keypair with cosign (using cosign generate-key-pair with no password for the private key). The public key should be in your public repo (your users need it to check the signatures), and you should paste the private key in Settings -> Secrets -> Actions as a repository secret named SIGNING_SECRET.