Sealed images: building a sealed image In the first post we covered the security chain behind sealed images, and in the second post we generated the Secure Boot keys needed to sign our boot artifacts. Now it’s time to put it all together and build a sealed image. A complete working example is available in the rhel-bootc-examples repository under the sealing directory.