Story #7419: As a user I can integrate with DOC,SEC: Docker Notary client / TUF support - Container Support - Pulp

Actions

Send by e-mail Copy link

Story #7419

closed

As a user I can integrate with DOC,SEC: Docker Notary client / TUF support

Added by westurner about 2 years ago. Updated 10 months ago.

Status:

CLOSED - WONTFIX

Priority:

Normal

Assignee:

Sprint/Milestone:

Start date:

Due date:

% Done:

Estimated time:

Platform Release:

Groomed:

Sprint Candidate:

Tags:

Sprint:

Quarter:

Description

Hey, are there and are there docs for Docker Notary / TUF features?

From https://twitter.com/westurner/status/1299542433106202625 ::

#DockerNotary (#TUF) is justified and necessary because container images sidestep normal OS package integrity verifications (with e.g. GPG) and nobody runs debsums or rpm --verify on images they're trusting with all of their ops. "Trusted Install Media"

https://docs.docker.com/notary/getting_started/

https://github.com/theupdateframework/specification/blob/master/tuf-spec.md

https://en.wikipedia.org/wiki/The_Update_Framework_(TUF)

(FWIU, #6871 is also an opportunity for better security. )

Actions

Copy link

Updated by ipanova@redhat.com about 2 years ago

Tracker changed from Issue to Story
Subject changed from DOC,SEC: Docker Notary / TUF support to As a user I can integrate with DOC,SEC: Docker Notary client / TUF support
% Done set to 0
Severity deleted (~~2. Medium~~)
Triaged deleted (No)