runtime icon indicating copy to clipboard operation
runtime copied to clipboard

Feat: Support non-file input for `acorn image sign --key`

Open iwilltry42 opened this issue 1 year ago • 2 comments

That's required e.g. for

  • the acorn-io/actions-sign GitHub Action (or other scenarios), where we don't want to (temporarily) write the private key repo secret to disk
  • the use cases, where the private key is not stored in a file, but rather retrieved via external tooling or some credential manager (e.g. Vault)

Example: This will work: acorn image sign --key="$(cat my.key)" my.reg.io/foo:v1

iwilltry42 avatar Sep 20 '23 16:09 iwilltry42

Tested with acorn version - v0.9.0-rc1-22-g08c68cf2+08c68cf2

I get "✗ ERROR: failed to import private key: invalid key file" error when trying to use the key in "$(cat sangeegh1)" format.

%acorn image sign sangeetha/testsignature:v1 --key="$(cat sangeegh1)" -a qatag=ok  
  •  Signing Image sangeetha/testsignature:v1 (digest: index.docker.io/sangeetha/testsignature@sha256:e7b2e6a60916544e2f58cd27591332f8d7132240678983057c80df00ed7e0ddd)
? Enter password for private key: *********
  ✗  ERROR:  failed to import private key: invalid key file

%acorn image sign sangeetha/testsignature:v1 --key "$(cat sangeegh1)" -a qatag=ok 
  •  Signing Image sangeetha/testsignature:v1 (digest: index.docker.io/sangeetha/testsignature@sha256:e7b2e6a60916544e2f58cd27591332f8d7132240678983057c80df00ed7e0ddd)
? Enter password for private key: *********
  ✗  ERROR:  failed to import private key: invalid key file

 % acorn image sign sangeetha/testsignature:v1 --key sangeegh1 -a qatag=ok 
  •  Signing Image sangeetha/testsignature:v1 (digest: index.docker.io/sangeetha/testsignature@sha256:e7b2e6a60916544e2f58cd27591332f8d7132240678983057c80df00ed7e0ddd)
? Enter password for private key: *********
  ✔  Created signature sha256:f084070580ffefaa634961d17126fba200b78a759a4a1838b90955c4fba06ebb

sangee2004 avatar Oct 12 '23 20:10 sangee2004

@sangee2004 what kind of key is that? Can you paste a redacted output of cat sangeegh1 or send it via Slack, please?

iwilltry42 avatar Oct 24 '23 11:10 iwilltry42