用于Windows映像的签名Docker镜像 [英] Signed Docker Images for Windows Images

问题描述

如果这不是这个问题的正确位置，我道歉，但我没有看到更好的类别。\

I apologize if this is not the correct location for this question, but I didn't see a better category.\

当拉下泊坞窗图像时，如果我启用Docker Content Trust来验证基本图像的真实性

When pulling down docker images, if I enable Docker Content Trust to verify the authenticity of base images

$Env:DOCKER_CONTENT_TRUST=1

我注意到官方微软图片似乎没有签名。  有什么理由为什么图片无法签名？ 否则，有没有计划支持微软公布的官方图片的签名？

I noticed that the official Microsoft Images don't appear to be signed.  Is there any reason why the images cannot be signed?  Otherwise, are there any plans to support the signing of the official images published by Microsoft?

示例：

docker pull mcr.microsoft.com/windows/nanoserver:1809
Error: remote trust data does not exist for mcr.microsoft.com/windows/nanoserver: mcr.microsoft.com does not have trust data for mcr.microsoft.com/windows/nanoserver

docker pull mcr.microsoft.com/windows/servercore:ltsc2019
Error: remote trust data does not exist for mcr.microsoft.com/windows/servercore: mcr.microsoft.com does not have trust data for mcr.microsoft.com/windows/servercore

docker pull mcr.microsoft.com/windows
Using default tag: latest
Error: remote trust data does not exist for mcr.microsoft.com/windows: mcr.microsoft.com does not have trust data for mcr.microsoft.com/windows

docker pull mcr.microsoft.com/dotnet/core/aspnet:2.2
Error: remote trust data does not exist for mcr.microsoft.com/dotnet/core/aspnet: mcr.microsoft.com does not have trust data for mcr.microsoft.com/dotnet/core/aspnet

推荐答案

好问题！我正在线下工作以找到答案。听到后会更新。 

Great question! I am working offline to find the answer. Will update once I hear back. 

这篇关于用于Windows映像的签名Docker镜像的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！