You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What is the problem you're trying to solve
We understand Docker Content Trust (DCT) works when calling docker cli either by parameter --disable-content-trust=false or export DOCKER_CONTENT_TRUST=1 before image operation.
So far we know several key points to DCT:
It is difficult to teach client users do this in their end devices.
Our application is rely on docker API, but docker API does not support DCT.
Describe the solution you'd like
Since Azure hosts signature server and registry server, ACR should know the image is signed or not.
We expect an option in server side, and the function works for docker cli and docker API.
When the option is enabled, only signed images can be pull. Otherwise will receive error response.
When the option is disabled, any image can be pull.
Additional context
We found Harbor already done the function. After Deployment security is enabled, neither docker cli nor docker API can not pull unsigned image.
The text was updated successfully, but these errors were encountered:
What is the problem you're trying to solve
We understand Docker Content Trust (DCT) works when calling docker cli either by parameter
--disable-content-trust=false
orexport DOCKER_CONTENT_TRUST=1
before image operation.So far we know several key points to DCT:
The problems are
Describe the solution you'd like
Since Azure hosts signature server and registry server, ACR should know the image is signed or not.
We expect an option in server side, and the function works for docker cli and docker API.
When the option is enabled, only signed images can be pull. Otherwise will receive error response.
When the option is disabled, any image can be pull.
Additional context
We found Harbor already done the function. After
Deployment security
is enabled, neither docker cli nor docker API can not pull unsigned image.The text was updated successfully, but these errors were encountered: