Stack Overflow
Stack Overflow

Questions tagged [docker-trusted-registry]

10 questions
38
votes
3 answers

Pull docker images from a private repository during docker build?

Is there any way of pulling images from a private registry during a docker build instead of docker hub? I deployed a private registry and I would like to be able to avoid naming its specific ip:port in the Dockerfile's FROM instruction. I was…
Julio Guerra
  • 5,523
  • 9
  • 51
  • 75
10
votes
1 answer

Docker Trusted Registry - Unable to satisfy available container slot

I am trying to install the Docker Truster Registry (DTR). I am executing the following command: docker run -it --rm \ docker/dtr install \ --ucp-url https://10.000.000.125 \ --ucp-node node123 \ --dtr-external-url https://10.000.000.97…
Ascalonian
  • 14,409
  • 18
  • 71
  • 103
1
vote
0 answers

How Docker Image consumer validate image origin

with docker content trust enabled, an image without trust metadata will not be downloaded. However, in the case where the trust metadata is present, the image will be pulled, so how does an image consumer validates the origin of the pulled image?…
yzftnt
  • 83
  • 1
  • 6
1
vote
1 answer

Can one use Docker Trusted Registry with Azure Kubernetes Service?

Does anyone know if you can use Docker Trusted Registry (DTR) with Azure Kubernetes Service (AKS)? Or is one required to use Azure Container Registry (ACR)? Thank you! Michael
208_man
  • 1,440
  • 3
  • 28
  • 59
1
vote
1 answer

Is one required to use Azure Container Registry to make use of Azure Containers?

I'm doing research on how container services in Azure compare with our on-prem implementation of containers, which includes Docker Trusted Registry. Is one required to use Azure Container Registry to make use of Azure Containers? Or could we tie…
208_man
  • 1,440
  • 3
  • 28
  • 59
1
vote
1 answer

Docker trust: how to sign image without pushing it to repository

We run private docker registry, and I am trying to use notary to add image signing. I have notary set up, and Docker client can sign images as it pushes to the registry. My problem is that we do not push to the same registry name we are pulling…
Sergei Genchev
  • 35
  • 1
  • 5
0
votes
1 answer

Difference DOCKER_CONTENT_TRUST vs content-trust

As I understood from Docker official documentation, both environment variable DOCKER_CONTENT_TRUST and deamon config content-trust prevents the usage of unsigned tags. If I want to restrict using un-signed images, what will be the best…
Shamran Siddique
  • 89
  • 1
  • 8
0
votes
0 answers

How can I verify the signature of a docker image?

Let's say a company has pushed and signed an image on its own docker registry using its X509 certificate and corresponding private key issued by a public CA. Having a copy of their certificate on my computer, how can I verify that the image I pulled…
Marc
  • 856
  • 1
  • 8
  • 20
0
votes
1 answer

Restrict push and pull to docker trusted registry DTR

In docker EE , is there a way to allow push and pull to DTR from specific machines while keeping the web UI access the same as normal? The use case is we would like to enforce the use of standard base images from DTR only in docker builds And we…
Ijaz Ahmad
  • 11,198
  • 9
  • 53
  • 73
0
votes
2 answers

"certificate signed by unknown authority" while trying to pull docker image from trusted registry

I am trying to pull a docker image from a Docker Trusted Registry. I know the https certificate is invalid and want to bypass it for now because I am just testing something quick. I'm on $ cat /etc/issue Debian GNU/Linux 8 \n \l and start docker…
Anthony
  • 33,838
  • 42
  • 169
  • 278