mirror of
https://github.com/containers/skopeo.git
synced 2025-09-25 04:11:36 +00:00
ae0595c56a
This is the script that runs 'skopeo COMMAND --help' and cross-checks that all the option flags are documented in man pages, and vice-versa (all options listed in man pages appear in COMMAND's --help message). Copied from podman, with changes for skopeo-land (removing the rst checks, and conforming to skopeo conventions). Signed-off-by: Ed Santiago <santiago@redhat.com>
48 lines
1.8 KiB
Markdown
48 lines
1.8 KiB
Markdown
% skopeo-standalone-verify(1)
|
|
|
|
## NAME
|
|
skopeo\-standalone\-verify - Verify an image signature.
|
|
|
|
## SYNOPSIS
|
|
**skopeo standalone-verify** _manifest_ _docker-reference_ _key-fingerprint_ _signature_
|
|
|
|
## DESCRIPTION
|
|
|
|
Verify a signature using local files; the digest will be printed on success. This is primarily a debugging tool, useful for special cases,
|
|
and usually should not be a part of your normal operational workflow. Additionally, consider configuring a signature verification policy file,
|
|
as per containers-policy.json(5).
|
|
|
|
_manifest_ Path to a file containing the image manifest
|
|
|
|
_docker-reference_ A docker reference expected to identify the image in the signature
|
|
|
|
_key-fingerprint_ Expected identity of the signing key
|
|
|
|
_signature_ Path to signature file
|
|
|
|
**Note:** If you do use this, make sure that the image can not be changed at the source location between the times of its verification and use.
|
|
|
|
## OPTIONS
|
|
|
|
**--help**, **-h**
|
|
|
|
Print usage statement
|
|
|
|
## EXAMPLES
|
|
|
|
```sh
|
|
$ skopeo standalone-verify busybox-manifest.json registry.example.com/example/busybox 1D8230F6CDB6A06716E414C1DB72F2188BB46CC8 busybox.signature
|
|
Signature verified, digest sha256:20bf21ed457b390829cdbeec8795a7bea1626991fda603e0d01b4e7f60427e55
|
|
```
|
|
|
|
## NOTES
|
|
|
|
This command is intended for use with local signatures e.g. OpenPGP ( other signature formats may be added in the future ), as per containers-signature(5). Furthermore, this command does **not** interact with the artifacts generated by Docker Content Trust (DCT). For more information, please see [containers-signature(5)](https://github.com/containers/image/blob/main/docs/containers-signature.5.md).
|
|
|
|
## SEE ALSO
|
|
skopeo(1), containers-signature(5), containers-policy.json(5)
|
|
|
|
## AUTHORS
|
|
|
|
Antonio Murdaca <runcom@redhat.com>, Miloslav Trmac <mitr@redhat.com>, Jhon Honce <jhonce@redhat.com>
|