github.com/kaisenlinux/docker.io@v0.0.0-20230510090727-ea55db55fac7/cli/docs/reference/commandline/trust_signer_remove.md (about)

     1  ---
     2  title: "signer remove"
     3  description: "The signer remove command description and usage"
     4  keywords: "signer, notary, trust"
     5  ---
     6  
     7  # trust signer remove
     8  
     9  ```markdown
    10  Usage:  docker trust signer remove [OPTIONS] NAME REPOSITORY [REPOSITORY...]
    11  
    12  Remove a signer
    13  
    14  Options:
    15    -f, --force   Do not prompt for confirmation before removing the most recent signer
    16    --help        Print usage
    17  ```
    18  
    19  ## Description
    20  
    21  `docker trust signer remove` removes signers from signed repositories.
    22  
    23  ## Examples
    24  
    25  ### Remove a signer from a repo
    26  
    27  To remove an existing signer, `alice`, from this repository:
    28  
    29  ```console
    30  $ docker trust inspect --pretty example/trust-demo
    31  
    32  No signatures for example/trust-demo
    33  
    34  
    35  List of signers and their keys:
    36  
    37  SIGNER              KEYS
    38  alice               05e87edcaecb
    39  bob                 5600f5ab76a2
    40  
    41  Administrative keys for example/trust-demo:
    42  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    43  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    44  ```
    45  
    46  Remove `alice` with `docker trust signer remove`:
    47  
    48  ```console
    49  $ docker trust signer remove alice example/trust-demo
    50  
    51  Removing signer "alice" from image example/trust-demo...
    52  Enter passphrase for repository key with ID 642692c:
    53  Successfully removed alice from example/trust-demo
    54  ```
    55  
    56  `docker trust inspect --pretty` now does not list `alice` as a valid signer:
    57  
    58  ```console
    59  $ docker trust inspect --pretty example/trust-demo
    60  
    61  No signatures for example/trust-demo
    62  
    63  
    64  List of signers and their keys:
    65  
    66  SIGNER              KEYS
    67  bob                 5600f5ab76a2
    68  
    69  Administrative keys for example/trust-demo:
    70  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    71  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    72  ```
    73  
    74  ### Remove a signer from multiple repos
    75  
    76  To remove an existing signer, `alice`, from multiple repositories:
    77  
    78  ```console
    79  $ docker trust inspect --pretty example/trust-demo
    80  
    81  SIGNED TAG          DIGEST                                                             SIGNERS
    82  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
    83  
    84  List of signers and their keys:
    85  
    86  SIGNER              KEYS
    87  alice               05e87edcaecb
    88  bob                 5600f5ab76a2
    89  
    90  Administrative keys for example/trust-demo:
    91  Repository Key: 95b9e5514c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    92  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    93  ```
    94  
    95  ```console
    96  $ docker trust inspect --pretty example/trust-demo2
    97  
    98  SIGNED TAG          DIGEST                                                             SIGNERS
    99  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
   100  
   101  List of signers and their keys:
   102  
   103  SIGNER              KEYS
   104  alice               05e87edcaecb
   105  bob                 5600f5ab76a2
   106  
   107  Administrative keys for example/trust-demo2:
   108  Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   109  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   110  ```
   111  
   112  Remove `alice` from both images with a single `docker trust signer remove` command:
   113  
   114  ```console
   115  $ docker trust signer remove alice example/trust-demo example/trust-demo2
   116  
   117  Removing signer "alice" from image example/trust-demo...
   118  Enter passphrase for repository key with ID 95b9e55:
   119  Successfully removed alice from example/trust-demo
   120  
   121  Removing signer "alice" from image example/trust-demo2...
   122  Enter passphrase for repository key with ID ece554f:
   123  Successfully removed alice from example/trust-demo2
   124  ```
   125  
   126  Run `docker trust inspect --pretty` to confirm that `alice` is no longer listed as a valid
   127  signer of either `example/trust-demo` or `example/trust-demo2`:
   128  
   129  ```console
   130  $ docker trust inspect --pretty example/trust-demo
   131  
   132  SIGNED TAG          DIGEST                                                             SIGNERS
   133  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   134  
   135  List of signers and their keys:
   136  
   137  SIGNER              KEYS
   138  bob                 5600f5ab76a2
   139  
   140  Administrative keys for example/trust-demo:
   141  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   142  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   143  ```
   144  
   145  ```console
   146  $ docker trust inspect --pretty example/trust-demo2
   147  
   148  SIGNED TAG          DIGEST                                                             SIGNERS
   149  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   150  
   151  List of signers and their keys:
   152  
   153  SIGNER              KEYS
   154  bob                 5600f5ab76a2
   155  
   156  Administrative keys for example/trust-demo2:
   157  Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   158  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   159  ```
   160  
   161  `docker trust signer remove` removes signers to repositories on a best effort
   162  basis, so it will continue to remove the signer from subsequent repositories if
   163  one attempt fails:
   164  
   165  ```console
   166  $ docker trust signer remove alice example/unauthorized example/authorized
   167  
   168  Removing signer "alice" from image example/unauthorized...
   169  No signer alice for image example/unauthorized
   170  
   171  Removing signer "alice" from image example/authorized...
   172  Enter passphrase for repository key with ID c6772a0:
   173  Successfully removed alice from example/authorized
   174  
   175  Error removing signer from: example/unauthorized
   176  ```
   177