diff --git a/Makefile-rpm-ostree.am b/Makefile-rpm-ostree.am
index 84aa85531b..63c1d8f50e 100644
--- a/Makefile-rpm-ostree.am
+++ b/Makefile-rpm-ostree.am
@@ -135,11 +135,15 @@ librpmostreecxxrs_la_CXXFLAGS = $(AM_CXXFLAGS) $(SANITIZER_FLAGS) $(rpmostree_co
 librpmostreecxxrs_la_LIBADD = -lstdc++
 BUILT_SOURCES += $(binding_generated_sources)
 
+ostreeextdir = $(DESTDIR)$(libexecdir)/libostree/ext
+
 # And install our binary
 install-rpmostree-hook:
 	install -d -m 0755 $(DESTDIR)$(bindir)
 	install -m 0755 -t $(DESTDIR)$(bindir) rpm-ostree
-	ln -Tsr -f $(DESTDIR)$(bindir)/rpm-ostree $(DESTDIR)$(bindir)/ostree-container
+	install -d -m 0755 $(ostreeextdir)
+	ln -Tsr -f $(DESTDIR)$(bindir)/rpm-ostree $(ostreeextdir)/ostree-ima-sign 
+	ln -Tsr -f $(DESTDIR)$(bindir)/rpm-ostree $(ostreeextdir)/ostree-container
 INSTALL_EXEC_HOOKS += install-rpmostree-hook
 
 # Wraps `cargo test`.  This is always a debug non-release build;
diff --git a/packaging/rpm-ostree.spec.in b/packaging/rpm-ostree.spec.in
index 6a0d4afd65..717274bc90 100644
--- a/packaging/rpm-ostree.spec.in
+++ b/packaging/rpm-ostree.spec.in
@@ -212,6 +212,7 @@ $PYTHON autofiles.py > files \
   '%{_sysconfdir}/rpm-ostreed.conf' \
   '%{_prefix}/lib/systemd/system/*' \
   '%{_libexecdir}/rpm-ostree*' \
+  '%{_libexecdir}/libostree/ext/*' \
   '%{_datadir}/polkit-1/actions/*.policy' \
   '%{_datadir}/dbus-1/system-services/*' \
   '%{_datadir}/bash-completion/completions/*'
diff --git a/rust/src/main.rs b/rust/src/main.rs
index 617bf2f30e..2c00b370f4 100644
--- a/rust/src/main.rs
+++ b/rust/src/main.rs
@@ -73,8 +73,8 @@ async fn inner_async_main(args: Vec<String>) -> Result<i32> {
     .await?
 }
 
-/// Multicall entrypoint for `ostree-container`.
-async fn multicall_ostree_container(args: Vec<String>) -> Result<i32> {
+/// Invoke the ostree-ext CLI code.
+async fn dispatch_ostree_ext(args: Vec<String>) -> Result<i32> {
     ostree_ext::cli::run_from_iter(args).await?;
     Ok(0)
 }
@@ -82,7 +82,7 @@ async fn multicall_ostree_container(args: Vec<String>) -> Result<i32> {
 /// Dispatch multicall binary to relevant logic, based on callname from `argv[0]`.
 async fn dispatch_multicall(callname: String, args: Vec<String>) -> Result<i32> {
     match callname.as_str() {
-        "ostree-container" => multicall_ostree_container(args).await,
+        "ostree-container" | "ostree-ima-sign" => dispatch_ostree_ext(args).await,
         _ => inner_async_main(args).await, // implicitly includes "rpm-ostree"
     }
 }
diff --git a/tests/kolainst/nondestructive/misc.sh b/tests/kolainst/nondestructive/misc.sh
index ede23cbd61..4b095d4496 100755
--- a/tests/kolainst/nondestructive/misc.sh
+++ b/tests/kolainst/nondestructive/misc.sh
@@ -6,13 +6,16 @@ cd $(mktemp -d)
 
 # Ensure multicall is correctly set up and working.
 R_O_DIGEST=$(sha512sum $(which rpm-ostree) | cut -d' ' -f1)
-O_C_DIGEST=$(sha512sum $(which ostree-container) | cut -d' ' -f1)
+O_C_DIGEST=$(sha512sum $(which /usr/libexec/libostree/ext/ostree-container) | cut -d' ' -f1)
 if test "${R_O_DIGEST}" != "${O_C_DIGEST}" ; then
     assert_not_reached "rpm-ostree and ostree-container are not the same binary"
 fi
-ostree-container container --help > cli_help.txt
-assert_file_has_content_literal cli_help.txt 'ostree-container container <SUBCOMMAND>'
-rm cli_help.txt
+for verb in container ima-sign; do
+    ostree "$verb" --help > cli_help.txt
+    assert_file_has_content_literal cli_help.txt "USAGE:"
+    assert_file_has_content_literal cli_help.txt "ostree-$verb $verb"
+    rm cli_help.txt
+done
 echo "ok multicall corectly set up and working"
 
 # make sure that package-related entries are always present,