Implement policy enforcement in (skopeo copy)

Finally, load and enforce the policy.

NOTE that this breaks a simple ./skopeo from a built directory if you
don't have /etc/atomic/policy.json installed for other reasons;
use (./skopeo --policy default-policy.json) instead.
This commit is contained in:
Miloslav Trmač
2016-06-02 16:26:01 +02:00
parent d4462330a5
commit 76a14985d6
2 changed files with 18 additions and 5 deletions

View File

@@ -59,6 +59,8 @@ Most commands refer to container images, using a _transport_`:`_details_ format.
Copy an image (manifest, filesystem layers, signatures) from one location to another.
Uses the system's signature verification policy to validate images, refuses to copy images rejected by the policy.
_source-image_ use the "image name" format described above
_destination-image_ use the "image name" format described above