mirror of https://github.com/docker/docs.git
67 lines
5.4 KiB
YAML
67 lines
5.4 KiB
YAML
command: docker trust view
|
|
short: Display detailed information about keys and signatures
|
|
long: |-
|
|
`docker trust view` provides detailed information on signed repositories.
|
|
This includes all image tags that are signed, who signed them, and who can sign
|
|
new tags.
|
|
|
|
By default, `docker trust view` renders results in a table.
|
|
|
|
`docker trust view` is currently experimental.
|
|
usage: docker trust view IMAGE[:TAG]
|
|
pname: docker trust
|
|
plink: docker_trust.yaml
|
|
examples: "### Get details about signatures for a single image tag\n\n\n```bash\n$
|
|
docker trust view alpine:latest\n\nSIGNED TAG DIGEST SIGNERS\nlatest
|
|
\ 1072e499f3f655a032e88542330cf75b02e7bdf673278f701d7ba61629ee3ebe (Repo
|
|
Admin)\n\nAdministrative keys for alpine:latest:\nRepository Key:\t5a46c9aaa82ff150bb7305a2d17d0c521c2d784246807b2dc611f436a69041fd\nRoot
|
|
Key:\ta2489bcac7a79aa67b19b96c4a3bf0c675ffdf00c6d2fabe1a5df1115e80adce\n```\n\nThe
|
|
`SIGNED TAG` is the signed image tag with a unique content-addressable `DIGEST`.
|
|
`SIGNERS` lists all entities who have signed.\n\nThe administrative keys listed
|
|
specify the root key of trust, as well as the administrative repository key. These
|
|
keys are responsible for modifying signers, and rotating keys for the signed repository.\n\nIf
|
|
signers are set up for the repository via other `docker trust` commands, `docker
|
|
trust view` displays them appropriately as a `SIGNER` and specify their `KEYS`:\n\n```bash\n$
|
|
docker trust view my-image:purple\nSIGNED TAG DIGEST SIGNERS\npurple
|
|
\ 941d3dba358621ce3c41ef67b47cf80f701ff80cdf46b5cc86587eaebfe45557 alice,
|
|
bob, carol\n\nList of signers and their keys:\n\nSIGNER KEYS\nalice
|
|
\ 47caae5b3e61, a85aab9d20a4\nbob 034370bcbd77, 82a66673242c\ncarol
|
|
\ b6f9f8e1aab0\n\nAdministrative keys for my-image:\nRepository Key:\t27df2c8187e7543345c2e0bf3a1262e0bc63a72754e9a7395eac3f747ec23a44\nRoot
|
|
Key:\t40b66ccc8b176be8c7d365a17f3e046d1c3494e053dd57cfeacfe2e19c4f8e8f\n```\n\nIf
|
|
the image tag is unsigned or unavailable, `docker trust view` does not display any
|
|
signed tags.\n\n```bash\n$ docker trust view unsigned-img\nNo signatures or cannot
|
|
access unsigned-img\n```\n\nHowever, if other tags are signed in the same image
|
|
repository, `docker trust view` reports relevant key information.\n\n```bash\n$
|
|
docker trust view alpine:unsigned\n\nNo signatures for alpine:unsigned\n\n\nAdministrative
|
|
keys for alpine:unsigned:\nRepository Key:\t5a46c9aaa82ff150bb7305a2d17d0c521c2d784246807b2dc611f436a69041fd\nRoot
|
|
Key:\ta2489bcac7a79aa67b19b96c4a3bf0c675ffdf00c6d2fabe1a5df1115e80adce\n```\n\n###
|
|
Get details about signatures for all image tags in a repository\n\n```bash\n$ docker
|
|
trust view alpine\nSIGNED TAG DIGEST SIGNERS\n2.6
|
|
\ 9ace551613070689a12857d62c30ef0daa9a376107ec0fff0e34786cedb3399b
|
|
\ (Repo Admin)\n2.7 9f08005dff552038f0ad2f46b8e65ff3d25641747d3912e3ea8da6785046561a
|
|
\ (Repo Admin)\n3.1 d9477888b78e8c6392e0be8b2e73f8c67e2894ff9d4b8e467d1488fcceec21c8
|
|
\ (Repo Admin)\n3.2 19826d59171c2eb7e90ce52bfd822993bef6a6fe3ae6bb4a49f8c1d0a01e99c7
|
|
\ (Repo Admin)\n3.3 8fd4b76819e1e5baac82bd0a3d03abfe3906e034cc5ee32100d12aaaf3956dc7
|
|
\ (Repo Admin)\n3.4 833ad81ace8277324f3ca8c91c02bdcf1d13988d8ecf8a3f97ecdd69d0390ce9
|
|
\ (Repo Admin)\n3.5 af2a5bd2f8de8fc1ecabf1c76611cdc6a5f1ada1a2bdd7d3816e121b70300308
|
|
\ (Repo Admin)\n3.6 1072e499f3f655a032e88542330cf75b02e7bdf673278f701d7ba61629ee3ebe
|
|
\ (Repo Admin)\nedge 79d50d15bd7ea48ea00cf3dd343b0e740c1afaa8e899bee475236ef338e1b53b
|
|
\ (Repo Admin)\nlatest 1072e499f3f655a032e88542330cf75b02e7bdf673278f701d7ba61629ee3ebe
|
|
\ (Repo Admin)\n\nAdministrative keys for alpine:\nRepository Key:\t5a46c9aaa82ff150bb7305a2d17d0c521c2d784246807b2dc611f436a69041fd\nRoot
|
|
Key:\ta2489bcac7a79aa67b19b96c4a3bf0c675ffdf00c6d2fabe1a5df1115e80adce\n```\n\nHere's
|
|
an example with signers that are set up by `docker trust` commands:\n\n```bash\n$
|
|
docker trust view my-image\nSIGNED TAG DIGEST SIGNERS\nred
|
|
\ 852cc04935f930a857b630edc4ed6131e91b22073bcc216698842e44f64d2943
|
|
\ alice\nblue f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197
|
|
\ alice, bob\ngreen cae8fedc840f90c8057e1c24637d11865743ab1e61a972c1c9da06ec2de9a139
|
|
\ alice, bob\nyellow 9cc65fc3126790e683d1b92f307a71f48f75fa7dd47a7b03145a123eaf0b45ba
|
|
\ carol\npurple 941d3dba358621ce3c41ef67b47cf80f701ff80cdf46b5cc86587eaebfe45557
|
|
\ alice, bob, carol\norange d6c271baa6d271bcc24ef1cbd65abf39123c17d2e83455bdab545a1a9093fc1c
|
|
\ alice\n\nList of signers and their keys for my-image:\n\nSIGNER KEYS\nalice
|
|
\ 47caae5b3e61, a85aab9d20a4\nbob 034370bcbd77, 82a66673242c\ncarol
|
|
\ b6f9f8e1aab0\n\nAdministrative keys for my-image:\nRepository Key:\t27df2c8187e7543345c2e0bf3a1262e0bc63a72754e9a7395eac3f747ec23a44\nRoot
|
|
Key:\t40b66ccc8b176be8c7d365a17f3e046d1c3494e053dd57cfeacfe2e19c4f8e8f\n```"
|
|
deprecated: false
|
|
experimental: false
|
|
|