Simple signing scheme: Now only support get signatures from local files.

[jialez0]

No description provided.

[Xynnn007]

FYI, the most recent OCI registry spec introduced a new API named
referrers, which can be used to store the signature in the image registry.

https://github.com/opencontainers/distribution-spec/blob/main/spec.md#listing-referrers
https://github.com/opencontainers/wg-reference-types/blob/main/docs/proposals/PROPOSAL_E.md#image-spec

However, for the spec is very new, no registries support this API now. Just record this for future use.

[ariel-adam]

@jialez0 is this issue still relevant or can be closed?
If it's still relevant to what release do you think we should map it to (mid-November, end-December, mid-February etc...)?

[xbkaishui]

hi how about this issue？ is there a plan to fix ?

[Xynnn007]

hi how about this issue？ is there a plan to fix ?

Hi @xbkaishui Now we can use cosign as signing scheme, and this scheme will avoid reading signatures from the local filesystem but reading from the image registry instead.

Please refer to this guide for more information. https://github.com/confidential-containers/image-rs/blob/main/docs/quickstart/image_signing.md

[xbkaishui]

hi how about this issue？ is there a plan to fix ?

Hi @xbkaishui Now we can use cosign as signing scheme, and this scheme will avoid reading signatures from the local filesystem but reading from the image registry instead.

Please refer to this guide for more information. https://github.com/confidential-containers/image-rs/blob/main/docs/quickstart/image_signing.md

ok， thanks, will try and let you know. by the way is there any wechat groups for communication?

[Xynnn007]

ok， thanks, will try and let you know. by the way is there any wechat groups for communication?

Sorry we do not have we-chat group. We have a slack channel for confidential-containers https://cloud-native.slack.com/archives/C039JSH0807 . You can join this slack channel for discussion

[xbkaishui]

https://cloud-native.slack.com/archives/C039JSH0807

hi, can't join the slack channel, can you invite me ? [email protected]

[Xynnn007]

https://cloud-native.slack.com/archives/C039JSH0807

hi, can't join the slack channel, can you invite me ? [email protected]

Yea I've sent you the mail.