github.com/docker/docker-ce@v17.12.1-ce-rc2+incompatible/components/cli/docs/reference/commandline/trust_signer_remove.md (about)

     1  ---
     2  title: "signer remove"
     3  description: "The signer remove command description and usage"
     4  keywords: "signer, notary, trust"
     5  ---
     6  
     7  <!-- This file is maintained within the docker/cli Github
     8       repository at https://github.com/docker/cli/. Make all
     9       pull requests against that repo. If you see this file in
    10       another repository, consider it read-only there, as it will
    11       periodically be overwritten by the definitive file. Pull
    12       requests which include edits to this file in other repositories
    13       will be rejected.
    14  -->
    15  
    16  # trust signer remove
    17  
    18  ```markdown
    19  Usage:	docker trust signer remove [OPTIONS] NAME REPOSITORY [REPOSITORY...]
    20  
    21  Remove a signer
    22  
    23  Options:
    24    -f, --force   Do not prompt for confirmation before removing the most recent signer
    25    --help        Print usage
    26  ```
    27  
    28  ## Description
    29  
    30  `docker trust signer remove` removes signers from signed repositories.
    31  
    32  `docker trust signer remove` is currently experimental.
    33  
    34  ## Examples
    35  
    36  ### Remove a signer from a repo
    37  
    38  To remove an existing signer, `alice`, from this repository: 
    39  
    40  ```bash
    41  $ docker trust view example/trust-demo
    42  
    43  No signatures for example/trust-demo
    44  
    45  
    46  List of signers and their keys:
    47  
    48  SIGNER              KEYS
    49  alice               05e87edcaecb
    50  bob                 5600f5ab76a2
    51  
    52  Administrative keys for example/trust-demo:
    53  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    54  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    55  ```
    56  
    57  Remove `alice` with `docker trust signer remove`:
    58  
    59  ```bash
    60  $ docker trust signer remove alice example/trust-demo
    61    Removing signer "alice" from image example/trust-demo...
    62    Enter passphrase for repository key with ID 642692c: 
    63    Successfully removed alice from example/trust-demo
    64  
    65  ```
    66  
    67  `docker trust view` now does not list `alice` as a valid signer:
    68  
    69  ```bash
    70  $ docker trust view example/trust-demo
    71  
    72  No signatures for example/trust-demo
    73  
    74  
    75  List of signers and their keys:
    76  
    77  SIGNER              KEYS
    78  bob                 5600f5ab76a2
    79  
    80  Administrative keys for example/trust-demo:
    81  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    82  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    83  ```
    84  
    85  ### Remove a signer from multiple repos
    86  
    87  To remove an existing signer, `alice`, from multiple repositories: 
    88  
    89  ```bash
    90  $ docker trust view example/trust-demo
    91  SIGNED TAG          DIGEST                                                             SIGNERS
    92  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
    93  
    94  List of signers and their keys:
    95  
    96  SIGNER              KEYS
    97  alice               05e87edcaecb
    98  bob                 5600f5ab76a2
    99  
   100  Administrative keys for example/trust-demo:
   101  Repository Key:	95b9e5514c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   102  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   103  ```
   104  ```bash
   105  $ docker trust view example/trust-demo2
   106  SIGNED TAG          DIGEST                                                             SIGNERS
   107  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
   108  
   109  List of signers and their keys:
   110  
   111  SIGNER              KEYS
   112  alice               05e87edcaecb
   113  bob                 5600f5ab76a2
   114  
   115  Administrative keys for example/trust-demo2:
   116  Repository Key:	ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   117  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   118  ```
   119  Remove `alice` from both images with a single `docker trust signer remove` command:
   120  
   121  ```bash
   122  $ docker trust signer remove alice example/trust-demo example/trust-demo2
   123  Removing signer "alice" from image example/trust-demo...
   124  Enter passphrase for repository key with ID 95b9e55: 
   125  Successfully removed alice from example/trust-demo
   126  
   127  Removing signer "alice" from image example/trust-demo2...
   128  Enter passphrase for repository key with ID ece554f: 
   129  Successfully removed alice from example/trust-demo2
   130  ```
   131  `docker trust view` no longer lists `alice` as a valid signer of either `example/trust-demo` or `example/trust-demo2`:
   132  ```bash
   133  $ docker trust view example/trust-demo
   134  SIGNED TAG          DIGEST                                                             SIGNERS
   135  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   136  
   137  List of signers and their keys:
   138  
   139  SIGNER              KEYS
   140  bob                 5600f5ab76a2
   141  
   142  Administrative keys for example/trust-demo:
   143  Repository Key:	ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   144  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   145  ```
   146  ```bash
   147  $ docker trust view example/trust-demo2
   148  SIGNED TAG          DIGEST                                                             SIGNERS
   149  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   150  
   151  List of signers and their keys:
   152  
   153  SIGNER              KEYS
   154  bob                 5600f5ab76a2
   155  
   156  Administrative keys for example/trust-demo2:
   157  Repository Key:	ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   158  Root Key:	3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   159  ```
   160  
   161  `docker trust signer remove` removes signers to repositories on a best effort basis, so it will continue to remove the signer from subsequent repositories if one attempt fails:
   162  
   163  ```bash
   164  $ docker trust signer remove alice example/unauthorized example/authorized
   165  Removing signer "alice" from image example/unauthorized...
   166  No signer alice for image example/unauthorized
   167  
   168  Removing signer "alice" from image example/authorized...
   169  Enter passphrase for repository key with ID c6772a0: 
   170  Successfully removed alice from example/authorized
   171  
   172  Error removing signer from: example/unauthorized
   173  ```
   174