github.com/khulnasoft/cli@v0.0.0-20240402070845-01bcad7beefa/docs/reference/commandline/trust_signer_remove.md (about)

     1  # trust signer remove
     2  
     3  <!---MARKER_GEN_START-->
     4  Remove a signer
     5  
     6  ### Options
     7  
     8  | Name            | Type | Default | Description                                                           |
     9  |:----------------|:-----|:--------|:----------------------------------------------------------------------|
    10  | `-f`, `--force` |      |         | Do not prompt for confirmation before removing the most recent signer |
    11  
    12  
    13  <!---MARKER_GEN_END-->
    14  
    15  ## Description
    16  
    17  `docker trust signer remove` removes signers from signed repositories.
    18  
    19  ## Examples
    20  
    21  ### Remove a signer from a repository
    22  
    23  To remove an existing signer, `alice`, from this repository:
    24  
    25  ```console
    26  $ docker trust inspect --pretty example/trust-demo
    27  
    28  No signatures for example/trust-demo
    29  
    30  
    31  List of signers and their keys:
    32  
    33  SIGNER              KEYS
    34  alice               05e87edcaecb
    35  bob                 5600f5ab76a2
    36  
    37  Administrative keys for example/trust-demo:
    38  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    39  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    40  ```
    41  
    42  Remove `alice` with `docker trust signer remove`:
    43  
    44  ```console
    45  $ docker trust signer remove alice example/trust-demo
    46  
    47  Removing signer "alice" from image example/trust-demo...
    48  Enter passphrase for repository key with ID 642692c:
    49  Successfully removed alice from example/trust-demo
    50  ```
    51  
    52  `docker trust inspect --pretty` now doesn't list `alice` as a valid signer:
    53  
    54  ```console
    55  $ docker trust inspect --pretty example/trust-demo
    56  
    57  No signatures for example/trust-demo
    58  
    59  
    60  List of signers and their keys:
    61  
    62  SIGNER              KEYS
    63  bob                 5600f5ab76a2
    64  
    65  Administrative keys for example/trust-demo:
    66  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    67  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    68  ```
    69  
    70  ### Remove a signer from multiple repositories
    71  
    72  To remove an existing signer, `alice`, from multiple repositories:
    73  
    74  ```console
    75  $ docker trust inspect --pretty example/trust-demo
    76  
    77  SIGNED TAG          DIGEST                                                             SIGNERS
    78  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
    79  
    80  List of signers and their keys:
    81  
    82  SIGNER              KEYS
    83  alice               05e87edcaecb
    84  bob                 5600f5ab76a2
    85  
    86  Administrative keys for example/trust-demo:
    87  Repository Key: 95b9e5514c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    88  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    89  ```
    90  
    91  ```console
    92  $ docker trust inspect --pretty example/trust-demo2
    93  
    94  SIGNED TAG          DIGEST                                                             SIGNERS
    95  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
    96  
    97  List of signers and their keys:
    98  
    99  SIGNER              KEYS
   100  alice               05e87edcaecb
   101  bob                 5600f5ab76a2
   102  
   103  Administrative keys for example/trust-demo2:
   104  Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   105  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   106  ```
   107  
   108  Remove `alice` from both images with a single `docker trust signer remove` command:
   109  
   110  ```console
   111  $ docker trust signer remove alice example/trust-demo example/trust-demo2
   112  
   113  Removing signer "alice" from image example/trust-demo...
   114  Enter passphrase for repository key with ID 95b9e55:
   115  Successfully removed alice from example/trust-demo
   116  
   117  Removing signer "alice" from image example/trust-demo2...
   118  Enter passphrase for repository key with ID ece554f:
   119  Successfully removed alice from example/trust-demo2
   120  ```
   121  
   122  Run `docker trust inspect --pretty` to confirm that `alice` is no longer listed as a valid
   123  signer of either `example/trust-demo` or `example/trust-demo2`:
   124  
   125  ```console
   126  $ docker trust inspect --pretty example/trust-demo
   127  
   128  SIGNED TAG          DIGEST                                                             SIGNERS
   129  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   130  
   131  List of signers and their keys:
   132  
   133  SIGNER              KEYS
   134  bob                 5600f5ab76a2
   135  
   136  Administrative keys for example/trust-demo:
   137  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   138  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   139  ```
   140  
   141  ```console
   142  $ docker trust inspect --pretty example/trust-demo2
   143  
   144  SIGNED TAG          DIGEST                                                             SIGNERS
   145  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   146  
   147  List of signers and their keys:
   148  
   149  SIGNER              KEYS
   150  bob                 5600f5ab76a2
   151  
   152  Administrative keys for example/trust-demo2:
   153  Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   154  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   155  ```
   156  
   157  `docker trust signer remove` removes signers to repositories on a best effort basis.
   158  It continues to remove the signer from subsequent repositories if one attempt fails:
   159  
   160  ```console
   161  $ docker trust signer remove alice example/unauthorized example/authorized
   162  
   163  Removing signer "alice" from image example/unauthorized...
   164  No signer alice for image example/unauthorized
   165  
   166  Removing signer "alice" from image example/authorized...
   167  Enter passphrase for repository key with ID c6772a0:
   168  Successfully removed alice from example/authorized
   169  
   170  Error removing signer from: example/unauthorized
   171  ```