Comments (5)
We’ve been somewhat discussing these things before, e.g. #25 .
I’m not sure what the best way to handle signatures for manifest lists is ATM. From a security POV, a signed manifest list implicitly authenticates the signed manifests, so, yes, a manifest signature could be accepted for the manifests listed in there.
OTOH that semantics may get messy: 1) download a manifest list 2) choose an item in the list, see the manifest digest; 3) publish/note the digest of the chosen manifest. Now, the user, given 3), can pull withmanifestlist@sha256:digestfromstep3
to refer to an individual manifest, and there is no obvious way to to from sha256:digestfromstep3
to the original manifest list (its digest, and tag, if any, are not known), so the signatures on the manifest list cannot be applied to the individual manifest. So, this would argue for attaching signatures to the individual images, not to the manifest list.
To a big extent extent all of this strongly depends on whether the tools (are there any in widespread use?) present manifest lists more as a single “fat” image or more as a directory of individually managed images; the signature UX model should be consistent with the non-signature manifest list UX model.
from image.
OTOH that semantics may get messy: 1) download a manifest list 2) choose an item in the list, see the manifest digest; 3) publish/note the digest of the chosen manifest. Now, the user, given 3), can pull withmanifestlist@sha256:digestfromstep3 to refer to an individual manifest, and there is no obvious way to to from sha256:digestfromstep3 to the original manifest list (its digest, and tag, if any, are not known), so the signatures on the manifest list cannot be applied to the individual manifest. So, this would argue for attaching signatures to the individual images, not to the manifest list.
Right...
I’m not sure what the best way to handle signatures for manifest lists is ATM. From a security POV, a signed manifest list implicitly authenticates the signed manifests, so, yes, a manifest signature could be accepted for the manifests listed in there.
is #115 in line with this though for now?
from image.
#115 is, AFAICS, OK WRT signing security.
from image.
@mtrmac @vrothberg What is the state of this issue. It is two years old, can we close it?
from image.
We’ve settled on signing individual images, not the manifest list itself.
from image.
Related Issues (20)
- Docker client code can no longer talk to the latest verson of the docker daemon 25.0.0 HOT 5
- Allow empty OCI configs for artifacts HOT 9
- policy.json overwrite not honouring $XDG_CONFIG_HOME HOT 3
- Podman cannot pull image from local registry HOT 4
- copy.Options.EnsureCompressionVariantsExist doesn’t detect existing variants with zstd:chunked
- support multiple sigstore keys HOT 6
- How can I copy from a tar file stream HOT 7
- "slices" module only in go 1.21 HOT 1
- Cannot pull sigstore signed image with podman HOT 4
- Error inspecting local manifest-lists HOT 6
- platform.WantedPlatforms is noisy on macOS HOT 7
- Incorrect syntax highlighting in containers-transports.5
- Why do we get the whole image when inspect with docker daemon? HOT 2
- Support sigstore BYO PKI verification HOT 1
- Support more arbitrary credential helper executable names? HOT 4
- OCI image index loose the artifactType property on copy HOT 4
- zstd:chunked and layer encryption don’t make sense together HOT 3
- How to change the policy.json default path? HOT 1
- Mirrors are ignored when registry is blocked HOT 11
- Support Witnessing Sigstore Signing with a Timestamp Authority Server HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from image.