From 754bbf7a25a8dda49b5d08ef0d0443bbf5af0e36 Mon Sep 17 00:00:00 2001 From: Craig Jennings Date: Sun, 7 Apr 2024 13:41:34 -0500 Subject: new repository --- ...Fcommandline%2Ftrust_signer_remove%2Findex.html | 114 +++++++++++++++++++++ 1 file changed, 114 insertions(+) create mode 100644 devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_signer_remove%2Findex.html (limited to 'devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_signer_remove%2Findex.html') diff --git a/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_signer_remove%2Findex.html b/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_signer_remove%2Findex.html new file mode 100644 index 00000000..79cda963 --- /dev/null +++ b/devdocs/docker/engine%2Freference%2Fcommandline%2Ftrust_signer_remove%2Findex.html @@ -0,0 +1,114 @@ +

docker trust signer remove


Remove a signer

Usage

$ docker trust signer remove [OPTIONS] NAME REPOSITORY [REPOSITORY...]
+

Refer to the options section for an overview of available OPTIONS for this command.

Description

docker trust signer remove removes signers from signed repositories.

For example uses of this command, refer to the examples section below.

Options

Name, shorthand Default Description
+--force , -f + Do not prompt for confirmation before removing the most recent signer

Examples

Remove a signer from a repo

To remove an existing signer, alice, from this repository:

$ docker trust inspect --pretty example/trust-demo
+
+No signatures for example/trust-demo
+
+
+List of signers and their keys:
+
+SIGNER              KEYS
+alice               05e87edcaecb
+bob                 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+

Remove alice with docker trust signer remove:

$ docker trust signer remove alice example/trust-demo
+
+Removing signer "alice" from image example/trust-demo...
+Enter passphrase for repository key with ID 642692c:
+Successfully removed alice from example/trust-demo
+

docker trust inspect --pretty now does not list alice as a valid signer:

$ docker trust inspect --pretty example/trust-demo
+
+No signatures for example/trust-demo
+
+
+List of signers and their keys:
+
+SIGNER              KEYS
+bob                 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+

Remove a signer from multiple repos

To remove an existing signer, alice, from multiple repositories:

$ docker trust inspect --pretty example/trust-demo
+
+SIGNED TAG          DIGEST                                                             SIGNERS
+v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
+
+List of signers and their keys:
+
+SIGNER              KEYS
+alice               05e87edcaecb
+bob                 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: 95b9e5514c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+
$ docker trust inspect --pretty example/trust-demo2
+
+SIGNED TAG          DIGEST                                                             SIGNERS
+v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
+
+List of signers and their keys:
+
+SIGNER              KEYS
+alice               05e87edcaecb
+bob                 5600f5ab76a2
+
+Administrative keys for example/trust-demo2:
+Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
+Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+

Remove alice from both images with a single docker trust signer remove command:

$ docker trust signer remove alice example/trust-demo example/trust-demo2
+
+Removing signer "alice" from image example/trust-demo...
+Enter passphrase for repository key with ID 95b9e55:
+Successfully removed alice from example/trust-demo
+
+Removing signer "alice" from image example/trust-demo2...
+Enter passphrase for repository key with ID ece554f:
+Successfully removed alice from example/trust-demo2
+

Run docker trust inspect --pretty to confirm that alice is no longer listed as a valid signer of either example/trust-demo or example/trust-demo2:

$ docker trust inspect --pretty example/trust-demo
+
+SIGNED TAG          DIGEST                                                             SIGNERS
+v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
+
+List of signers and their keys:
+
+SIGNER              KEYS
+bob                 5600f5ab76a2
+
+Administrative keys for example/trust-demo:
+Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
+Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+
$ docker trust inspect --pretty example/trust-demo2
+
+SIGNED TAG          DIGEST                                                             SIGNERS
+v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
+
+List of signers and their keys:
+
+SIGNER              KEYS
+bob                 5600f5ab76a2
+
+Administrative keys for example/trust-demo2:
+Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
+Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
+

docker trust signer remove removes signers to repositories on a best effort basis, so it will continue to remove the signer from subsequent repositories if one attempt fails:

$ docker trust signer remove alice example/unauthorized example/authorized
+
+Removing signer "alice" from image example/unauthorized...
+No signer alice for image example/unauthorized
+
+Removing signer "alice" from image example/authorized...
+Enter passphrase for repository key with ID c6772a0:
+Successfully removed alice from example/authorized
+
+Error removing signer from: example/unauthorized
+

Parent command

Command Description
docker trust signer Manage entities who can sign Docker images
Command Description
docker trust signer add Add a signer
docker trust signer remove Remove a signer
+

+ © 2019 Docker, Inc.
Licensed under the Apache License, Version 2.0.
Docker and the Docker logo are trademarks or registered trademarks of Docker, Inc. in the United States and/or other countries.
Docker, Inc. and other parties may also have trademark rights in other terms used herein.
+ https://docs.docker.com/engine/reference/commandline/trust_signer_remove/ +

+
-- cgit v1.2.3