containers-signature(5) (NAME) containers-signature - (DESCRIPTION) go.podman.io/image/v5/signature . go.podman.io/image/v5/signature ( signature.PolicyContext) . . (HIGH-LEVEL OVERVIEW) (end-to-end) ( ) ( / ) . (payload) JSON . JSON . ( ...) (manifest digest) docker/distribution (immutable) . <<>> (SHOULD) . (THE CRYPTOGRAPHIC SIGNATURE) (blob) JSON ( JSON JSON << >> (detached signature) JSON ). OpenPGP (RFC 4880) . ( . . .) <<>> (SHOULD) JSON ( policy.json ) <<>> JSON . ( <<>> (MAY) JSON <<>> .) OpenPGP OpenPGP << >> (MUST) ( go.podman.io/image/v5/signature ): o << >> << >> (Signed Message) RFC 4880 11.3 ( << >> << >> << >> (Cleartext Signature) RFC 4880 7 << >> (ASCII Armor) RFC 4880 6 ). o << >> << >> (Signature Packet) RFC 4880 5.2 . o << >> ( ) . o << >> . o << >> JSON ( JSON << >> ). o << >> . <<>> . JSON (JSON PROCESSING AND FORWARD COMPATIBILITY) JSON (RFC 7159). <<>> (SHOULD) ( ) ( JSON) . JSON <<>> (MAY) JSON ( <#optionalcreator> ) . JSON << >> (MUST) JSON critical optional JSON . critical << >> type ( <#criticaltype>) << >> . ( ) << >> critical . JSON . <<>> optional <<>> . <<>> optional . JSON (JSON DATA FORMAT) . <<>> << >> critical . { "critical": { "type": "atomic container signature", "image": { "docker-manifest-digest": "sha256:817a12c32a39bbe394944ba49de563e085f1d3c5266eb8e9723256bc4448680e" }, "identity": { "docker-reference": "docker.io/library/busybox:latest" } }, "optional": { "creator": "some software package v1.0.1-35", "timestamp": 1483228800, } } critical << >> JSON . << >> critical . critical.type << >> atomic container signature ( ) . << >> . ( <<>> type JSON critical.type .) critical.image << >> JSON . << >> critical.image . ( docker-manifest- digest .) critical.image.docker-manifest-digest << >> JSON github.com/opencontainers/go-digest.Digest . << >> docker/distribution . <<>> ( ) . : o . o 1 <<>> docker/distribution JSON . critical.identity << >> JSON ( ) . << >> critical.identity . ( docker-reference / .) critical.identity.docker-reference << >> JSON github.com/docker/distribution/reference ( busybox:latest docker.io/library/busybox:latest ) . critical.identity.docker-reference <<>> ( ) . << >> / ( docker/distribution/reference). critical.identity.docker-reference docker/distribution . ( :latest ) critical.identity.docker-reference / ( critical.identity.docker-reference ). <<>> policy.json . critical.identity.docker-reference <<>> (digest) <<>> ( ). optional << >> JSON . <<>> optional <<>> . <<>> optional . optional.creator << >> JSON ( ). : o <<>> ( <<>> ). o <<>> ( ) optional.creator . o <<>> ( regexp) ( <<>> ). <<>> optional.creator ( optional.timestamp) <<>> ( ) . optional.creator <<>> . ( optional.creator .) optional.timestamp << >> JSON ( 00:00 UTC) . Containers containers-signature(5)