diff options
| author | Qi Wang <qiwan@redhat.com> | 2020-10-27 17:25:20 -0400 |
|---|---|---|
| committer | Qi Wang <qiwan@redhat.com> | 2020-12-07 09:58:38 -0500 |
| commit | cf8f2342a1cdbd821fec217af75c2438c00a9b4d (patch) | |
| tree | e446ee5ccd991e299d865b9e83e1fdeabf32e411 /docs/source | |
| parent | dc5da90523f35146f5368a31be7edf39be13beb4 (diff) | |
| download | podman-cf8f2342a1cdbd821fec217af75c2438c00a9b4d.tar.gz podman-cf8f2342a1cdbd821fec217af75c2438c00a9b4d.tar.bz2 podman-cf8f2342a1cdbd821fec217af75c2438c00a9b4d.zip | |
image sign using per user registries.d
Support per user ~/.config/containers/registries.d to allow rootless image sign configurations.
Signed-off-by: Qi Wang <qiwan@redhat.com>
Diffstat (limited to 'docs/source')
| -rw-r--r-- | docs/source/markdown/podman-image-sign.1.md | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/docs/source/markdown/podman-image-sign.1.md b/docs/source/markdown/podman-image-sign.1.md index 1bd6e5b9d..7a924b80b 100644 --- a/docs/source/markdown/podman-image-sign.1.md +++ b/docs/source/markdown/podman-image-sign.1.md @@ -9,7 +9,9 @@ podman-image-sign - Create a signature for an image ## DESCRIPTION **podman image sign** will create a local signature for one or more local images that have been pulled from a registry. The signature will be written to a directory -derived from the registry configuration files in /etc/containers/registries.d. By default, the signature will be written into /var/lib/containers/sigstore directory. +derived from the registry configuration files in `$HOME/.config/containers/registries.d` if it exists, +otherwise `/etc/containers/registries.d` (unless overridden at compile-time), see **containers-registries.d(5)** for more information. +By default, the signature will be written into `/var/lib/containers/sigstore` for root and `$HOME/.local/share/containers/sigstore` for non-root users ## OPTIONS @@ -38,7 +40,8 @@ Sign the busybox image with the identify of foo@bar.com with a user's keyring an ## RELATED CONFIGURATION The write (and read) location for signatures is defined in YAML-based -configuration files in /etc/containers/registries.d/. When you sign +configuration files in /etc/containers/registries.d/ for root, +or $HOME/.config/containers/registries.d for non-root users. When you sign an image, Podman will use those configuration files to determine where to write the signature based on the the name of the originating registry or a default storage value unless overridden with the --directory @@ -53,5 +56,8 @@ the signature will be written into sub-directories of /var/lib/containers/sigstore/privateregistry.example.com. The use of 'sigstore' also means the signature will be 'read' from that same location on a pull-related function. +## SEE ALSO +containers-registries.d(5) + ## HISTORY November 2018, Originally compiled by Qi Wang (qiwan at redhat dot com) |