podman-image-sign - Man Page

Create a signature for an image

Synopsis

podman image sign [options] image [image ...]

Description

podman image sign will create a local signature for one or more local images that have been pulled from a registry. The signature will be written to a directory derived from the registry configuration files in $HOME/.config/containers/registries.d if it exists, otherwise /etc/containers/registries.d (unless overridden at compile-time), see containers-registries.d(5) for more information. By default, the signature will be written into /var/lib/containers/sigstore for root and $HOME/.local/share/containers/sigstore for non-root users

Options

--help, -h

Print usage statement.

--all, -a

Sign all the manifests of the multi-architecture image (default false).

--cert-dir=path

Use certificates at path (*.crt, *.cert, *.key) to connect to the registry. Default certificates directory is /etc/containers/certs.d. (Not available for remote commands)

--directory, -d=dir

Store the signatures in the specified directory.  Default: /var/lib/containers/sigstore

--sign-by=identity

Override the default identity of the signature.

Examples

Sign the busybox image with the identify of foo@bar.com with a user's keyring and save the signature in /tmp/signatures/.

sudo podman image sign --sign-by foo@bar.com --directory /tmp/signatures docker://privateregistry.example.com/foobar

See Also

containers-registries.d(5)

History

November 2018, Originally compiled by Qi Wang (qiwan at redhat dot com)

Referenced By

podman-image(1).

The man page docker-image-sign(1) is an alias of podman-image-sign(1).