Sealed images: deploying and verifying a sealed image

Sealed images: deploying and verifying a sealed image In the previous post we built a sealed, signed container image. Now it’s time to deploy it to a virtual machine and verify that the full security chain is active. bcvk: a tool for running bootc VMs bcvk (bootc virtualization kit) is a tool that makes it easy to run bootc container images as virtual machines.