Please sign newer docker images

[rhuddleston]

Please sign newer docker images

[mattrobenolt]

gg everyone.

Thanks for hopping in @tianon. ❤️

[tianon]

This sounds like docker-library/official-images#5874 😔

[mattrobenolt]

We did it.

[mattrobenolt]

Can you elaborate?

[rhuddleston]

Sorry accidentally submitted before I added the content. See above @mattrobenolt

[mattrobenolt]

How do I do this? We don’t even build the images, it’s up to the docker team since these are official images. So if things were properly signed in the past, I’ve never done anything explicitly there. Can you point me to some information about this? I’ve never heard or seen any of this before.

[rhuddleston]

Ah if this is an "official image" that the docker team is building then we'll need them to fix it. Do you have a way to contact them? I could point out how to sign images etc but it's pretty involved and like you say you're not even building them. @mattrobenolt

[rhuddleston]

Also note typically it says "Docker Official Images" at the top of dockerhub pages that are official e.g. https://hub.docker.com/_/mysql

But looks like the sentry one doesn't have that currently https://hub.docker.com/_/sentry/

Maybe there was some change @mattrobenolt ?

[mattrobenolt]

cc @tianon @yosifkit

I don’t really know what that means or if I have any control over it. I know I go through their process and they publish them. Beyond that, I’m not sure how this process works.

For example, docker-library/official-images#5772

[mattrobenolt]

Maybe that “Docker Official Image” moreso means it’s maintained by Docker the company? In our case, we maintain the image, but it’s published under their namespace. Otherwise, it’d be like, docker pull getsentry/sentry:9.1 instead of just docker pull sentry:9.1.

[rhuddleston]

This is fixed now BTW so thanks to whoever fixed it :)

Also sentry:9 points to sentry:9.1 now 👍