I only skimmed this but it seems superficially sane. What infrastructure will execute the script? cron job? A pod in Fedora's OCP instance? Something else?

It'll be run as part of the compose process on the main compose controller machine.

I was going to say something about running this through ShellCheck and using set -eou pipefail, but then I saw the comment on line 61. :stuck_out_tongue:

Since the script relies on skopeo and buildah, is it safe to assume that the compose machine(s) will have those installed already?

Other than that question, this looks good enough for the short term. :)

We need to tweak it a little for the non osbuild ones which I am in the process to update.

LGTM!

Since the script relies on skopeo and buildah, is it safe to assume that the compose machine(s) will have those installed already?

Yes, the rel-eng composer have all of those pieces by default.

Other than that question, this looks good enough for the short term. :)

Yes, it's a phase one to move things forward :)