github.com/AliyunContainerService/cli@v0.0.0-20181009023821-814ced4b30d0/docs/reference/commandline/trust_revoke.md (about)

     1  ---
     2  title: "trust revoke"
     3  description: "The revoke command description and usage"
     4  keywords: "revoke, notary, trust"
     5  ---
     6  
     7  <!-- This file is maintained within the docker/cli GitHub
     8       repository at https://github.com/docker/cli/. Make all
     9       pull requests against that repo. If you see this file in
    10       another repository, consider it read-only there, as it will
    11       periodically be overwritten by the definitive file. Pull
    12       requests which include edits to this file in other repositories
    13       will be rejected.
    14  -->
    15  
    16  # trust revoke
    17  
    18  ```markdown
    19  Usage:  docker trust revoke [OPTIONS] IMAGE[:TAG]
    20  
    21  Remove trust for an image
    22  
    23  Options:
    24        --help   Print usage
    25    -y, --yes    Do not prompt for confirmation
    26  ```
    27  
    28  ## Description
    29  
    30  `docker trust revoke` removes signatures from tags in signed repositories.
    31  
    32  ## Examples
    33  
    34  ### Revoke signatures from a signed tag
    35  
    36  Here's an example of a repo with two signed tags:
    37  
    38  
    39  ```bash
    40  $ docker trust view example/trust-demo
    41  SIGNED TAG          DIGEST                                                              SIGNERS
    42  red                 852cc04935f930a857b630edc4ed6131e91b22073bcc216698842e44f64d2943    alice
    43  blue                f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197    alice, bob
    44  
    45  List of signers and their keys for example/trust-demo:
    46  
    47  SIGNER              KEYS
    48  alice               05e87edcaecb
    49  bob                 5600f5ab76a2
    50  
    51  Administrative keys for example/trust-demo:
    52  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    53  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    54  ```
    55  
    56  When `alice`, one of the signers, runs `docker trust revoke`:
    57  
    58  ```bash
    59  $ docker trust revoke example/trust-demo:red
    60  Enter passphrase for delegation key with ID 27d42a8:
    61  Successfully deleted signature for example/trust-demo:red
    62  ```
    63  
    64  After revocation, the tag is removed from the list of released tags:
    65  
    66  ```bash
    67  $ docker trust view example/trust-demo
    68  SIGNED TAG          DIGEST                                                              SIGNERS
    69  blue                f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197    alice, bob
    70  
    71  List of signers and their keys for example/trust-demo:
    72  
    73  SIGNER              KEYS
    74  alice               05e87edcaecb
    75  bob                 5600f5ab76a2
    76  
    77  Administrative keys for example/trust-demo:
    78  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    79  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    80  ```
    81  
    82  ### Revoke signatures on all tags in a repository
    83  
    84  When no tag is specified, `docker trust` revokes all signatures that you have a signing key for.
    85  
    86  ```bash
    87  $ docker trust view example/trust-demo
    88  SIGNED TAG          DIGEST                                                              SIGNERS
    89  red                 852cc04935f930a857b630edc4ed6131e91b22073bcc216698842e44f64d2943    alice
    90  blue                f1c38dbaeeb473c36716f6494d803fbfbe9d8a76916f7c0093f227821e378197    alice, bob
    91  
    92  List of signers and their keys for example/trust-demo:
    93  
    94  SIGNER              KEYS
    95  alice               05e87edcaecb
    96  bob                 5600f5ab76a2
    97  
    98  Administrative keys for example/trust-demo:
    99  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   100  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   101  ```
   102  
   103  When `alice`, one of the signers, runs `docker trust revoke`:
   104  
   105  ```bash
   106  $ docker trust revoke example/trust-demo
   107  Please confirm you would like to delete all signature data for example/trust-demo? [y/N] y
   108  Enter passphrase for delegation key with ID 27d42a8:
   109  Successfully deleted signature for example/trust-demo
   110  ```
   111  
   112  All tags that have `alice`'s signature on them are removed from the list of released tags:
   113  
   114  ```bash
   115  $ docker trust view example/trust-demo
   116  
   117  No signatures for example/trust-demo
   118  
   119  
   120  List of signers and their keys for example/trust-demo:
   121  
   122  SIGNER              KEYS
   123  alice               05e87edcaecb
   124  bob                 5600f5ab76a2
   125  
   126  Administrative keys for example/trust-demo:
   127  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   128  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   129  ```
   130