fluentd-docker-image icon indicating copy to clipboard operation
fluentd-docker-image copied to clipboard

docker images no longer signed/verifiable

Open lmgray opened this issue 4 years ago • 1 comments

It seems recent images available in docker.io are not being signed as they had been in the past:

$ export DOCKER_CONTENT_TRUST=1

$ docker pull fluent/fluentd:v0.12.43-2.0
Error: remote trust data does not exist for docker.io/fluent/fluentd: notary.docker.io does not have trust data for docker.io/fluent/fluentd

$ docker pull fluent/fluentd:v0.12-2
Error: remote trust data does not exist for docker.io/fluent/fluentd: notary.docker.io does not have trust data for docker.io/fluent/fluentd

In the past, e.g. `latest` was signed.  Is this an oversight?  Are any signed/verifiable images available or planned?

lmgray avatar Mar 23 '21 11:03 lmgray

We can't provide signed image under current workflow.

https://docs.docker.com/engine/security/trust/

kenhys avatar Aug 27 '24 01:08 kenhys