docker / notary-official-images

About

This repo contains the binaries and Dockerfiles used to build the minimal official images for the Notary Server and Notary Signer applications.

notary-official-images's Issues

Question: How to upgrade notary client to work for signer/server 0.3.0?

Hi!
I installed notary using:

sudo apt-get update
sudo apt-get install notary

I need for a latest version of notary client in order to add delegates. I am trying to update my notary client and I didn't manage to do this. I am using 0.3.0 images for notary server/signer. Any small information will be very usefully. The documentation in the official site is not available (see below). Thank you!

Notary on AARCH64

I am trying to build notary on AARCH64.
I have successfully built the binaries for notary-server and notary-signer on AARCH64.
The docker is running succesfully if using Debian:stretch

FROM debian:stretch
EXPOSE 4443
COPY ./server-config.json /notary/server/
COPY ./notary-server /notary/server/
COPY ./entrypoint.sh /notary/server/
WORKDIR /notary/server
RUN useradd -ms \bin\sh notary
USER notary
ENV PATH=$PATH:/notary/server
ENTRYPOINT [ "entrypoint.sh" ]
CMD [ "notary-server", "--help" ]

But, I am geting error on using Alpine: latest as:

FROM alpine:latest
EXPOSE 4443
COPY ./server-config.json /notary/server/
COPY ./notary-server /notary/server/
COPY ./entrypoint.sh /notary/server/
WORKDIR /notary/server
RUN adduser -D -H -g "" notary
USER notary
ENV PATH=$PATH:/notary/server
ENTRYPOINT [ "entrypoint.sh" ]
CMD [ "notary-server", "--help" ]

To run the docker I am using the command
docker run -ti --entrypoint=/bin/sh notary-server -s

Please suggest what can be done to resolve the error arising in Alpine usecase.
Can i use Debian: Stretch for Notary?

Note: In both the cases, I am using the same binaries,

v0.6.1-2 image does not work anymore

Recent notary v0.6.1-2 image does not work any more, because the binary was built with golang 1.15 and hit the issue dvsekhvalnov/jose2go#26 . The current Dockerfile does not specify golang version and golang version might have changed in alpine:3.13 .

Other related issue: notaryproject/notary#1602

Seems doesn't work for now.

Hi, there
I tried this but seems not work for me. Would you please have a check if it works for you :)

0.6.0 is out!

notary 0.6.0 is now out, but the images are not updated yet.

unable to reach trust server at this time: 405

Hi team,

I am getting the below error when I sign docker image

unable to reach trust server at this time: 405

Signing and pushing trust data for local image XXXXXXX.azurecr.io/iXXXXt:20221215.0, may overwrite remote trust data
The push refers to repository [XXXXXX.azurecr.io/iXXXXt]
b4b6602c5b67: Preparing
bd85244e96c9: Preparing
92e3c0b56177: Preparing
b3b4d36afdff: Preparing
f3e63e0869b3: Preparing
48b03e1004df: Preparing
ec4a38999118: Preparing
ec4a38999118: Waiting
48b03e1004df: Waiting
f3e63e0869b3: Layer already exists
bd85244e96c9: Layer already exists
b4b6602c5b67: Layer already exists
b3b4d36afdff: Layer already exists
92e3c0b56177: Layer already exists
48b03e1004df: Layer already exists
ec4a38999118: Layer already exists
20221215.0: digest: sha256:794dd26a9d7f7214381d55a73185d8340ead197ca624a055487f6e50ed6c49dd size: 1797
Signing and pushing trust metadata
time="2022-12-21T13:56:27+05:30" level=error msg="Could not publish Repository since we could not update: unable to reach trust server at this time: 405."
failed to sign XXXXXXXXX.azurecr.io/iXXXort:20221215.0: unable to reach trust server at this time: 405.

===
DEBU[0000] reading certificate directory: /root/.docker/tls/XXXXX.azurecr.io
DEBU[0000] No yubikey found, using alternative key storage: no library found
DEBU[0000] Making dir path: /root/.docker/trust/tuf/XXXXXX.azurecr.io/resourceactivity/changelist
DEBU[0000] received HTTP status 405 when requesting root.
unable to reach trust server at this time: 405.

Please help

An example (full) server configuration file.

Does it make sense to add a full example about the configuration file of server, especially the Auth part?

Add ARM64 support to Notary

I have the notary binaries compiled for arm64v8 architecture.
These are working very well at my end and I think these can be pushed to mainline to extend support of notary for arm64v8 as well.

Right now, I am sceptical that whether a new branch would be created for arm64v8 or we will keep existing binaries along with arm64 binaries with a conditional check to use them at run-time.

I would be happy to raise PR if it suits maintainers.
Thanks to #7 for reference.

Add CI

CircleCI or something should work for now, just to validate the build.

Move this repository to "theupdateframework"

With notary itself being in that organization, it probably makes sense to move this repository as well

@justincormack @endophage