diff --git a/Harbor-FAQs.md b/Harbor-FAQs.md index 7133543..c992060 100644 --- a/Harbor-FAQs.md +++ b/Harbor-FAQs.md @@ -589,15 +589,18 @@ registry=# select artifact_id, subject_artifact_id, digest, subject_artifact_dig ``` ## Notation Signature Accessory -Here's some tips you for your awareness,as of [Harbor v2.11.0](https://github.com/goharbor/harbor/releases/tag/v2.11.0) and [Notation v1.2.0](https://github.com/notaryproject/notation/releases/tag/v1.2.0-alpha.1) released and both fully support [distribution-spec v1.1](https://github.com/opencontainers/distribution-spec/tree/v1.1.0). - - Harbor recommend to explicitly set flag`--force-referrers-tag=false` while singing since Harbor supports [distribution-spec referrers-api](https://github.com/opencontainers/distribution-spec/blob/main/spec.md#enabling-the-referrers-api), this would avoid to generate unnecessary signature index for Harbor, hence, more smoothy experiences on signature verification, image copy and replications. +Here's some tips you for your awareness, as of [Harbor v2.11.0](https://github.com/goharbor/harbor/releases/tag/v2.11.0) and [Notation v1.2.0](https://github.com/notaryproject/notation/releases/tag/v1.2.0-alpha.1) released and both fully support [distribution-spec v1.1](https://github.com/opencontainers/distribution-spec/tree/v1.1.0). + + - **Harbor recommend to explicitly set flag** `--force-referrers-tag=false` while singing since Harbor supports [distribution-spec referrers-api](https://github.com/opencontainers/distribution-spec/blob/main/spec.md#enabling-the-referrers-api). This could avoid generating unnecessary signature index for Harbor, hence, more smoothy experiences on signature singing/verification, image copy and replications. + ``` $ notation-v1.2 --force-referrers-tag=false sign xx.xx.xx.xxx/library/hello-world:latest ``` Screenshot 2024-06-20 at 15 01 47 - - If you forgot to disable the `force-referrers-tag` or choose to use the notation v1.2 default behavior, please be aware of this would pushing extra signature index while signing. Miss-behaving like delete the index solely, unselected copy or replication the index along with images would cause trouble for the next signing operations. + + - If you choose to use the notation v1.2 default behavior or forgot to disable the `force-referrers-tag`, please be aware of this would pushing extra signature index while signing. Miss-behaving like delete the index solely, unselected copy or replication the index along with images would cause trouble for the next signing operations. ``` ~$ notation-v1.2 sign xx.xx.xx.xxx/library/hello-world:latest ```