Is it safe to run /usr/bin/bootupctl backend generate-update-metadata in a Containerfile?

[travier]

To fix issues with Fedora Atomic desktops, I'm considering backporting the bootupd inclusion to Fedora 39:

• F39/F40: Fails to boot on with "vmlinuz has invalid signature" fedora-silverblue/issue-tracker#543
• https://gitlab.com/fedora/ostree/sig/-/issues/1

While thinking about that, I wondered if it would be able to create layered images with bootupd included in a layer.

Is it safe to run /usr/bin/bootupctl backend generate-update-metadata from a container layer?

FROM quay.io/fedora-ostree-desktops/kinoite:40

RUN rpm-ostree install bootupd \
    &&\
    /usr/bin/bootupctl backend generate-update-metadata \
    && \
    ostree container commit

I'll do some testing.

[cgwalters]

Offhand, I think so.