#pgp #signature

podman-sequoia

A polyfill to use Sequoia as a signing backend for containers

6 releases (3 breaking)

0.4.0-pqc.2 Dec 18, 2025
0.4.0-pqc.1 Nov 27, 2025
0.3.2 Jan 29, 2026
0.3.1 Nov 27, 2025
0.1.0 Jul 14, 2025

#2102 in Cryptography

Apache-2.0 and LGPL-2.0-or-later

78KB
1.5K SLoC

podman-sequoia

This directory contains the source code of a C shared library (libpodman_sequoia.so) that enables to use sequoia-pgp as a signing backend.

For building, you need rustc (version 1.79 or later), cargo, and openssl-devel. For testing, you also need the sq command (version 1.3.0 or later).

Building

To build the shared library and bindings on Linux, do:

$ PREFIX=/usr LIBDIR="\${prefix}/lib64" cargo build --release

On macOS, prefix the command with one more value:

$ DYLD_FALLBACK_LIBRARY_PATH="$(xcode-select --print-path)/Toolchains/XcodeDefault.xctoolchain/usr/lib/" PREFIX=…

Installing

Just copy the shared library in the library search path:

$ sudo cp -a rust/target/release/libpodman_sequoia.* /usr/lib64

Testing

To test, in the top-level directory of containers image, do:

$ LD_LIBRARY_PATH=$PWD/signature/internal/sequoia/rust/target/release \
  make BUILDTAGS=containers_image_sequoia

License

Apache License 2.0

SPDX-License-Identifier: Apache-2.0

Dependencies

~49–71MB
~1M SLoC