releasenotes: clarify digest for multi-arch images (#587)

* releasenotes: clarify digest for multi-arch images The cosign verification must use the arch specific digest, otherwise the verification will fail. * Update asciidoc/edge-book/releasenotes.adoc Co-authored-by: Atanas Dinov <[email protected]>
suse-edge · Feb 25, 2025 · 18c81c0 · 18c81c0
1 parent 41cd7cd
commit 18c81c0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/asciidoc/edge-book/releasenotes.adoc b/asciidoc/edge-book/releasenotes.adoc
@@ -184,6 +184,8 @@ Verify the container image hash, for example using `crane`:
 sha256:d85c1bcd286dec81a3806a8fb8b66c0e0741797f23174f5f6f41281b1e27c52f
 ----
 
+NOTE: For multi-arch images it is also necessary to specify a platform when obtaining the digest, e.g `--platform linux/amd64` or `--platform linux/arm64`. Failure to do this will result in an error in the following step (`Error: no matching attestations`).
+
 Verify with `cosign`:
 
 [,bash]