Implement kernel signing

recipes/base/common.yml

@@ -1,4 +1,12 @@
+---
+# yaml-language-server: $schema=https://schema.blue-build.org/module-list-v1.json
 modules:
+  - type: files
+    files:
+      - source: bootc-update
+        destination: /usr/lib/systemd/system
+      - source: base
+        destination: /
   - type: script
     env:
       CSFG: /usr/lib/systemd/system-generators/coreos-sulogin-force-generator
@@ -8,22 +16,13 @@ modules:
       # see detail: https://github.com/ublue-os/main/issues/653
       - curl -sSLo ${CSFG} https://raw.githubusercontent.com/coreos/fedora-coreos-config/refs/heads/stable/overlay.d/05core/usr/lib/systemd/system-generators/coreos-sulogin-force-generator
       - chmod +x ${CSFG}
-  - type: files
-    files:
-      - source: bootc-update
-        destination: /usr/lib/systemd/system
+  - type: dnf
+    install:
+      packages:
+        - sbsign
   - type: systemd
     system:
       masked:
         - rpm-ostreed-automatic.timer
       enabled:
         - bootc-fetch-apply-updates.timer
-  - type: copy
-    src: files/base/usr/share/plymouth
-    dest: /usr/share/plymouth
-  # - type: os-release
-  #   properties:
-  #     NAME: WunkerOS
-  #     ID: wunker_os
-  #     PRETTY_NAME: Wunker OS
-  - from-file: common/post-build.yml