Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Enable DOCKER_CONTENT_TRUST support

See original GitHub issue

Description

Info

d-m-p version : 0.24.0

Apache Maven 3.5.2

Docker version : 17.11.0-ce
If it’s a feature request, what is your use case :

Allow pulling of signed images to improve security.

It does not appear that export DOCKER_CONTENT_TRUST=1 has any impact on whether the dmp plugin verifies pulled images.

Issue Analytics

State:
Created 6 years ago
Reactions:2
Comments:5

Top GitHub Comments

1reaction

tlvenncommented, Mar 20, 2019

Hi, is there any update on this ? @rhuss any insight ? Trying to have mvn docker:push to also sign my images but as the OP outlined, even though DOCKER_CONTENT_TRUST is set, nothing really change.

0reactions

rohanKanojiacommented, Nov 22, 2019

Hi Guys,

How can we add this support? Somehow I can’t find anything in Docker Engine API regarding content trust. Does that mean we have to port docker cli implementation into the plugin?

Top Results From Across the Web

Automation with content trust - Docker Documentation

It is very common for Docker Content Trust to be built into existing automation systems. To allow tools to wrap Docker and push...

4.1.1 Enabling or Disabling Docker Content Trust

For individual docker build, docker push, or docker pull commands, you can specify the --disable-content-trust=false and --disable-content-trust=true options to ...

Docker Content Trust: What It Is and How It Secures Container ...

At its core, Docker Content Trust is very simple. It is logic inside the Docker client that can verify images you pull or...

Docker Content Trust Basics | dockerlabs - Collabnix

Step 1: Enable Docker Content Trust · Enable Docker Content Trust. $ export DOCKER_CONTENT_TRUST=1 · Try pulling an unsigned image (any unsigned image...

Docker Content Trust - Sonatype Help

Docker Content Trust (DCT) allows docker image tags to be cryptographically signed. This allows users to verify the integrity and the publisher of...