summaryrefslogtreecommitdiff
path: root/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html
diff options
context:
space:
mode:
authorCraig Jennings <c@cjennings.net>2024-04-07 13:41:34 -0500
committerCraig Jennings <c@cjennings.net>2024-04-07 13:41:34 -0500
commit754bbf7a25a8dda49b5d08ef0d0443bbf5af0e36 (patch)
treef1190704f78f04a2b0b4c977d20fe96a828377f1 /devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html
new repository
Diffstat (limited to 'devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html')
-rw-r--r--devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html71
1 files changed, 71 insertions, 0 deletions
diff --git a/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html b/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html
new file mode 100644
index 00000000..2ec18cd7
--- /dev/null
+++ b/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_revoke%2Findex.html
@@ -0,0 +1,71 @@
+<h1>docker trust revoke</h1> <p><br></p> <p>Remove trust for an image</p> <h2 id="usage">Usage</h2> <div class="highlight"><pre class="highlight" data-language="">$ docker trust revoke [OPTIONS] IMAGE[:TAG]
+</pre></div> <p>Refer to the <a href="#options">options section</a> for an overview of available <a href="#options"><code class="language-plaintext highlighter-rouge">OPTIONS</code></a> for this command.</p> <h2 id="description">Description</h2> <p name="extended-description"><code class="language-plaintext highlighter-rouge">docker trust revoke</code> removes signatures from tags in signed repositories.</p> <p>For example uses of this command, refer to the <a href="#examples">examples section</a> below.</p> <h2 id="options">Options</h2> <table> <thead> <tr> <td>Name, shorthand</td> <td>Default</td> <td>Description</td> </tr> </thead> <tbody> <tr> <td>
+<code class="language-plaintext highlighter-rouge">--yes</code> , <code class="language-plaintext highlighter-rouge">-y</code>
+</td> <td></td> <td>Do not prompt for confirmation</td> </tr> </tbody> </table> <h2 id="examples">Examples</h2> <h3 id="revoke-signatures-from-a-signed-tag">Revoke signatures from a signed tag</h3> <p>Here’s an example of a repo with two signed tags:</p> <div class="highlight"><pre class="highlight" data-language="">$ docker trust inspect --pretty example/trust-demo
+SIGNED TAG DIGEST SIGNERS
+red 852cc04935f930a857b630edc4ed6131e91b22073bcc216698842e44f64d2943 alice
+blue f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197 alice, bob
+
+List of signers and their keys for example/trust-demo:
+
+SIGNER KEYS
+alice 05e87edcaecb
+bob 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key: 3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+</pre></div> <p>When <code class="language-plaintext highlighter-rouge">alice</code>, one of the signers, runs <code class="language-plaintext highlighter-rouge">docker trust revoke</code>:</p> <div class="highlight"><pre class="highlight" data-language="">$ docker trust revoke example/trust-demo:red
+Enter passphrase for delegation key with ID 27d42a8:
+Successfully deleted signature for example/trust-demo:red
+</pre></div> <p>After revocation, the tag is removed from the list of released tags:</p> <div class="highlight"><pre class="highlight" data-language="">$ docker trust inspect --pretty example/trust-demo
+SIGNED TAG DIGEST SIGNERS
+blue f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197 alice, bob
+
+List of signers and their keys for example/trust-demo:
+
+SIGNER KEYS
+alice 05e87edcaecb
+bob 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key: 3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+</pre></div> <h3 id="revoke-signatures-on-all-tags-in-a-repository">Revoke signatures on all tags in a repository</h3> <p>When no tag is specified, <code class="language-plaintext highlighter-rouge">docker trust</code> revokes all signatures that you have a signing key for.</p> <div class="highlight"><pre class="highlight" data-language="">$ docker trust inspect --pretty example/trust-demo
+SIGNED TAG DIGEST SIGNERS
+red 852cc04935f930a857b630edc4ed6131e91b22073bcc216698842e44f64d2943 alice
+blue f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197 alice, bob
+
+List of signers and their keys for example/trust-demo:
+
+SIGNER KEYS
+alice 05e87edcaecb
+bob 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key: 3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+</pre></div> <p>When <code class="language-plaintext highlighter-rouge">alice</code>, one of the signers, runs <code class="language-plaintext highlighter-rouge">docker trust revoke</code>:</p> <div class="highlight"><pre class="highlight" data-language="">$ docker trust revoke example/trust-demo
+Please confirm you would like to delete all signature data for example/trust-demo? [y/N] y
+Enter passphrase for delegation key with ID 27d42a8:
+Successfully deleted signature for example/trust-demo
+</pre></div> <p>All tags that have <code class="language-plaintext highlighter-rouge">alice</code>’s signature on them are removed from the list of released tags:</p> <div class="highlight"><pre class="highlight" data-language="">$ docker trust inspect --pretty example/trust-demo
+
+No signatures for example/trust-demo
+
+
+List of signers and their keys for example/trust-demo:
+
+SIGNER KEYS
+alice 05e87edcaecb
+bob 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key: 3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+</pre></div> <h2 id="parent-command">Parent command</h2> <table> <thead> <tr> <th style="text-align: left">Command</th> <th style="text-align: left">Description</th> </tr> </thead> <tbody> <tr> <td style="text-align: left"><a href="../trust/index">docker trust</a></td> <td style="text-align: left">Manage trust on Docker images</td> </tr> </tbody> </table> <h2 id="related-commands">Related commands</h2> <table> <thead> <tr> <td>Command</td> <td>Description</td> </tr> </thead> <tbody> <tr> <td><a href="../trust_inspect/index">docker trust inspect</a></td> <td>Return low-level information about keys and signatures</td> </tr> <tr> <td><a href="../trust_key/index">docker trust key</a></td> <td>Manage keys for signing Docker images</td> </tr> <tr> <td><a href="index">docker trust revoke</a></td> <td>Remove trust for an image</td> </tr> <tr> <td><a href="../trust_sign/index">docker trust sign</a></td> <td>Sign an image</td> </tr> <tr> <td><a href="../trust_signer/index">docker trust signer</a></td> <td>Manage entities who can sign Docker images</td> </tr> </tbody> </table> <div class="_attribution">
+ <p class="_attribution-p">
+ &copy; 2019 Docker, Inc.<br>Licensed under the Apache License, Version 2.0.<br>Docker and the Docker logo are trademarks or registered trademarks of Docker, Inc. in the United States and/or other countries.<br>Docker, Inc. and other parties may also have trademark rights in other terms used herein.<br>
+ <a href="https://docs.docker.com/engine/reference/commandline/trust_revoke/" class="_attribution-link">https://docs.docker.com/engine/reference/commandline/trust_revoke/</a>
+ </p>
+</div>