In this chapter, we will learn about the Docker Content Trust concept and its related tools. To provide trusted content in Docker environments, we will use Docker Content Trust to encrypt metadata information applied to Docker objects. Therefore, any unauthorized changes or object manipulation will be reported. We will be able to ensure that all the objects in our environment are trusted if none of these issues are found.
First, we will introduce The Update Framework, and then we will learn how to sign images. After that, we will learn how to verify signatures to ensure their precedence and ownership. Finally, we will apply those concepts to run a trusted environment in production.
We will cover the following topics in this chapter:
- The Update Framework
- Signing images
- Reviewing signatures
- Creating and running applications in trusted environments...