Questions tagged [tuf]

For questions related to The Update Framework (TUF), or its reference implementation, python-tuf.

4 questions
4
votes
1 answer

Signing docker images with delegation key only

I'm trying following scenario. On my laptop I have created a delegation key. On a server I have created the target and authorized my delegation key Now when signing my Docker image via docker trust I'm getting following error. An error occurred…
Marco
  • 4,817
  • 5
  • 34
  • 75
4
votes
3 answers

Docker Trust Initialization

When the initial trust on docker content trust with notary on tuf is initialized I understand how TUF, Notary and Content Trust works. But what is not clear to me is, how the initial trust is setup. How do I know, that the first pull is not a…
Flo
  • 2,699
  • 4
  • 24
  • 46
1
vote
0 answers

How Docker Image consumer validate image origin

with docker content trust enabled, an image without trust metadata will not be downloaded. However, in the case where the trust metadata is present, the image will be pulled, so how does an image consumer validates the origin of the pulled image?…
yzftnt
  • 83
  • 1
  • 6
1
vote
1 answer

How to list all of the known root keys in docker (Docker Content Trust)

How can I list all of the Docker Content Trust root keys on my system? I am setting up a CI process that will use the debian:stable-slim docker image to build my application's releases in ephemeral cloud instances. I want to make sure that every…
Michael Altfield
  • 2,083
  • 23
  • 39