For the record, bootc supports and has workflows for verity images.