Procedure to make ostree-image-signed work as expected

[xlionjuan]

According to /etc/containers/policy.json, only, ghcr.io/ublue-os and some RedHat sources will verify the signing key of the containers, if I didn't manually add my repo to and my pubkey to it, it will just proceed it, I tried modify policy.json and add my pubkey to system, rpm-ostree will return following error:

error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: A signature was required, but no signature exists

It didn't say it is incorrect, it said it isn't exists, is is because I push my image to Docker Hub?

But when I manually run cosign verify, it said my container is valid.