atomic-sign man page

atomic-sign- Create a signature for an image


Only use atomic sign if you trust the remote registry which contains the image (preferably by being the only administrator of it).


atomic sign [-h|--help] [-d, --directory] [--sign-by] [-g, --gnupghome] [ image ... ]


atomic sign will create a local signature for one or more local images that have been pulled from a registry. By default, the signature will be written into a directory derived from the registry configuration files as configured by registry_confdir in /etc/atomic.conf.


-h --help

Print usage statement.

-d --directory

Store the signatures in the specified directory.  Default: /var/lib/atomic/signature


Override the default identity of the signature. You can define a default in /etc/atomic.conf
 with the key default_signer.

-g --gnupghome

Specify the GNUPGHOME directory to use for signing, e.g. ~/.gnupg. This
 argument will override the value of gnupg_homedir in /etc/atomic.conf.
 Defaults to the homedir or the uid defined in /proc/self/loginuid if it exists, or
 $SUDO_UID if it is defined, or current UID.


Sign the foobar image from

atomic sign

Sign the foobar image and save the signature in /tmp/signatures/.

atomic sign -d /tmp/signatures

Sign the busybox image with the identify of with a user's keyring

sudo atomic sign --sign-by --gnupghome=~/.gnupg


Initial revision by Brent Baude (bbaude at redhat dot com) August 2016 Updated by Brent Baude (bbaude at redhat dot com) September 2016 Updated by Aaron Weitekamp (aweiteka at redhat dot com) September 2016

Referenced By


Atomic Man Pages Brent Baude August 2016