github.com/pwn-term/docker@v0.0.0-20210616085119-6e977cce2565/cli/docs/reference/commandline/trust_signer_remove.md (about)

     1  ---
     2  title: "signer remove"
     3  description: "The signer remove command description and usage"
     4  keywords: "signer, notary, trust"
     5  ---
     6  
     7  # trust signer remove
     8  
     9  ```markdown
    10  Usage:  docker trust signer remove [OPTIONS] NAME REPOSITORY [REPOSITORY...]
    11  
    12  Remove a signer
    13  
    14  Options:
    15    -f, --force   Do not prompt for confirmation before removing the most recent signer
    16    --help        Print usage
    17  ```
    18  
    19  ## Description
    20  
    21  `docker trust signer remove` removes signers from signed repositories.
    22  
    23  ## Examples
    24  
    25  ### Remove a signer from a repo
    26  
    27  To remove an existing signer, `alice`, from this repository:
    28  ```bash
    29  $ docker trust inspect --pretty example/trust-demo
    30  
    31  No signatures for example/trust-demo
    32  
    33  
    34  List of signers and their keys:
    35  
    36  SIGNER              KEYS
    37  alice               05e87edcaecb
    38  bob                 5600f5ab76a2
    39  
    40  Administrative keys for example/trust-demo:
    41  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    42  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    43  ```
    44  
    45  Remove `alice` with `docker trust signer remove`:
    46  
    47  ```bash
    48  $ docker trust signer remove alice example/trust-demo
    49  
    50  Removing signer "alice" from image example/trust-demo...
    51  Enter passphrase for repository key with ID 642692c:
    52  Successfully removed alice from example/trust-demo
    53  ```
    54  
    55  `docker trust inspect --pretty` now does not list `alice` as a valid signer:
    56  
    57  ```bash
    58  $ docker trust inspect --pretty example/trust-demo
    59  
    60  No signatures for example/trust-demo
    61  
    62  
    63  List of signers and their keys:
    64  
    65  SIGNER              KEYS
    66  bob                 5600f5ab76a2
    67  
    68  Administrative keys for example/trust-demo:
    69  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    70  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    71  ```
    72  
    73  ### Remove a signer from multiple repos
    74  
    75  To remove an existing signer, `alice`, from multiple repositories:
    76  
    77  ```bash
    78  $ docker trust inspect --pretty example/trust-demo
    79  
    80  SIGNED TAG          DIGEST                                                             SIGNERS
    81  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
    82  
    83  List of signers and their keys:
    84  
    85  SIGNER              KEYS
    86  alice               05e87edcaecb
    87  bob                 5600f5ab76a2
    88  
    89  Administrative keys for example/trust-demo:
    90  Repository Key: 95b9e5514c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
    91  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
    92  ```
    93  
    94  ```bash
    95  $ docker trust inspect --pretty example/trust-demo2
    96  
    97  SIGNED TAG          DIGEST                                                             SIGNERS
    98  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   alice, bob
    99  
   100  List of signers and their keys:
   101  
   102  SIGNER              KEYS
   103  alice               05e87edcaecb
   104  bob                 5600f5ab76a2
   105  
   106  Administrative keys for example/trust-demo2:
   107  Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   108  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   109  ```
   110  
   111  Remove `alice` from both images with a single `docker trust signer remove` command:
   112  
   113  ```bash
   114  $ docker trust signer remove alice example/trust-demo example/trust-demo2
   115  
   116  Removing signer "alice" from image example/trust-demo...
   117  Enter passphrase for repository key with ID 95b9e55:
   118  Successfully removed alice from example/trust-demo
   119  
   120  Removing signer "alice" from image example/trust-demo2...
   121  Enter passphrase for repository key with ID ece554f:
   122  Successfully removed alice from example/trust-demo2
   123  ```
   124  
   125  Run `docker trust inspect --pretty` to confirm that `alice` is no longer listed as a valid
   126  signer of either `example/trust-demo` or `example/trust-demo2`:
   127  
   128  ```bash
   129  $ docker trust inspect --pretty example/trust-demo
   130  
   131  SIGNED TAG          DIGEST                                                             SIGNERS
   132  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   133  
   134  List of signers and their keys:
   135  
   136  SIGNER              KEYS
   137  bob                 5600f5ab76a2
   138  
   139  Administrative keys for example/trust-demo:
   140  Repository Key: ecc457614c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4555b3c6ab02f71e
   141  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   142  ```
   143  
   144  ```bash
   145  $ docker trust inspect --pretty example/trust-demo2
   146  
   147  SIGNED TAG          DIGEST                                                             SIGNERS
   148  v1                  74d4bfa917d55d53c7df3d2ab20a8d926874d61c3da5ef6de15dd2654fc467c4   bob
   149  
   150  List of signers and their keys:
   151  
   152  SIGNER              KEYS
   153  bob                 5600f5ab76a2
   154  
   155  Administrative keys for example/trust-demo2:
   156  Repository Key: ece554f14c9fc399da523a5f4e24fe306a0a6ee1cc79a10e4553d2ab20a8d9268
   157  Root Key:       3cb2228f6561e58f46dbc4cda4fcaff9d5ef22e865a94636f82450d1d2234949
   158  ```
   159  
   160  `docker trust signer remove` removes signers to repositories on a best effort
   161  basis, so it will continue to remove the signer from subsequent repositories if
   162  one attempt fails:
   163  
   164  ```bash
   165  $ docker trust signer remove alice example/unauthorized example/authorized
   166  
   167  Removing signer "alice" from image example/unauthorized...
   168  No signer alice for image example/unauthorized
   169  
   170  Removing signer "alice" from image example/authorized...
   171  Enter passphrase for repository key with ID c6772a0:
   172  Successfully removed alice from example/authorized
   173  
   174  Error removing signer from: example/unauthorized
   175  ```
   176