For questions related to The Update Framework (TUF), or its reference implementation, python-tuf.
Questions tagged [tuf]
4 questions
4
votes
1 answer
Signing docker images with delegation key only
I'm trying following scenario.
On my laptop I have created a delegation key.
On a server I have created the target and authorized my delegation key
Now when signing my Docker image via docker trust I'm getting following error.
An error occurred…

Marco
- 4,817
- 5
- 34
- 75
4
votes
3 answers
Docker Trust Initialization
When the initial trust on docker content trust with notary on tuf is initialized I understand how TUF, Notary and Content Trust works.
But what is not clear to me is, how the initial trust is setup.
How do I know, that the first pull is not a…

Flo
- 2,699
- 4
- 24
- 46
1
vote
0 answers
How Docker Image consumer validate image origin
with docker content trust enabled, an image without trust metadata will not be downloaded.
However, in the case where the trust metadata is present, the image will be pulled, so how does an image consumer validates the origin of the pulled image?…

yzftnt
- 83
- 1
- 6
1
vote
1 answer
How to list all of the known root keys in docker (Docker Content Trust)
How can I list all of the Docker Content Trust root keys on my system?
I am setting up a CI process that will use the debian:stable-slim docker image to build my application's releases in ephemeral cloud instances. I want to make sure that every…

Michael Altfield
- 2,083
- 23
- 39