Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
skopeo-standalone-verify(1)()			   skopeo-standalone-verify(1)()

NAME
     skopeo-standalone-verify  - Debugging tool - Verify an image signature from
     local files.

SYNOPSIS
     skopeo standalone-verify manifest docker-reference key-fingerprints  signa-
     ture

DESCRIPTION
     Verify  a	signature  using local files; the digest will be printed on suc-
     cess. This is primarily a debugging tool, useful  for  special  cases,  and
     usually should not be a part of your normal operational workflow. Addition-
     ally,  consider  configuring  a  signature verification policy file, as per
     containers-policy.json(5).

     manifest Path to a file containing the image manifest

     docker-reference A docker reference expected to identify the image  in  the
     signature

     key-fingerprints  Identities  of trusted signing keys (comma separated), or
     "any" to trust any known key when using a public key file

     signature Path to signature file

     Note: If you do use this, make sure that the image can not  be  changed  at
     the source location between the times of its verification and use.

OPTIONS
     See also skopeo(1) for options placed before the subcommand name.

     --help, -h

     Print usage statement

     --public-key-file public key file

     File  containing  the public keys to use when verifying signatures. If this
     is not specified, keys from the GPG homedir are used.

EXAMPLES
     $ skopeo standalone-verify busybox-manifest.json registry.example.com/example/busybox 1D8230F6CDB6A06716E414C1DB72F2188BB46CC8  busybox.signature
     Signature verified, digest sha256:20bf21ed457b390829cdbeec8795a7bea1626991fda603e0d01b4e7f60427e55

NOTES
     This command is intended for use with local signatures e.g. OpenPGP ( other
     signature formats may be added in the future ),  as  per  containers-signa-
     ture(5).  Furthermore,  this  command  does not interact with the artifacts
     generated by Docker Content Trust (DCT). For more information,  please  see
     containers-signature(5)		      <https://github.com/containers/im-
     age/blob/main/docs/containers-signature.5.md>.

SEE ALSO
     skopeo(1), containers-signature(5), containers-policy.json(5)

AUTHORS
     Antonio Murdaca runcom@redhat.com <mailto:runcom@redhat.com>, Miloslav  Tr-
     mac  mitr@redhat.com <mailto:mitr@redhat.com>, Jhon Honce jhonce@redhat.com
     <mailto:jhonce@redhat.com>

						   skopeo-standalone-verify(1)()

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=skopeo-standalone-verify&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help