From 299bf31337e5037375cb5682fc83edefd7eb7b8e Mon Sep 17 00:00:00 2001 From: root Date: Mon, 15 May 2017 02:51:51 +0000 Subject: [PATCH] Add the discription of notary in User Guide --- docs/user_guide.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/user_guide.md b/docs/user_guide.md index e45bca95e..219572f99 100644 --- a/docs/user_guide.md +++ b/docs/user_guide.md @@ -242,6 +242,9 @@ If you want to enable content trust to ensure that images are signed, please set export DOCKER_CONTENT_TRUST=1 export DOCKER_CONTENT_TRUST_SERVER=https://10.117.169.182:4443 ``` +If you push the image for the first time, You will be asked to enter the root key passphrase. This will be needed every time you push a new image while the ``DOCKER_CONTENT_TRUST`` flag is set. +The root key is generated at: ``/root/.docker/trust/private/root_keys`` +You will also be asked to enter a new passphrase for the image. This is generated at ``/root/.docker/trust/private/tuf_keys/[registry name] /[imagepath]``. If you are using a self-signed cert, make sure to copy the CA cert into ```/etc/docker/certs.d/10.117.169.182``` and ```$HOME/.docker/tls/10.117.169.182:4443/```. When an image is signed, it is indicated in the Web UI. **Note: Replace "10.117.169.182" with the IP address or domain name of your Harbor node. In order to use content trust, HTTPS must be enabled in Harbor.**