Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add local sign/verification for OCI layout directory #288

Merged
merged 40 commits into from
Apr 19, 2023

Conversation

patrickzheng200
Copy link
Contributor

This PR modified Registry and Notation packages to incorporate local sign and verification of OCI layout directory.
This PR targets the RC.4 release. (Note, support of OCI layout tarball will be included in future releases after RC.4.)

Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
@patrickzheng200 patrickzheng200 self-assigned this Mar 14, 2023
@patrickzheng200 patrickzheng200 added the enhancement New feature or request label Mar 14, 2023
@patrickzheng200 patrickzheng200 added this to the RC-4 milestone Mar 14, 2023
@patrickzheng200 patrickzheng200 marked this pull request as draft March 14, 2023 11:14
@patrickzheng200 patrickzheng200 changed the title Feat: Added local sign/verification for OCI layout directory Feat: Added local sign/verification for OCI layout directory [Draft] Mar 14, 2023
Signed-off-by: Patrick Zheng <[email protected]>
@patrickzheng200 patrickzheng200 changed the title Feat: Added local sign/verification for OCI layout directory [Draft] Feat: Added local sign/verification for OCI layout directory Mar 14, 2023
@patrickzheng200 patrickzheng200 marked this pull request as ready for review March 14, 2023 13:06
@shizhMSFT shizhMSFT changed the title Feat: Added local sign/verification for OCI layout directory feat: add local signing/verification for OCI layout directory Mar 14, 2023
@patrickzheng200 patrickzheng200 changed the title feat: add local signing/verification for OCI layout directory feat: add local signing/verification for OCI layout directory[Draft] Mar 15, 2023
@patrickzheng200 patrickzheng200 marked this pull request as draft March 15, 2023 01:09
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
shizhMSFT
shizhMSFT previously approved these changes Mar 31, 2023
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

registry/repository.go Outdated Show resolved Hide resolved
Signed-off-by: Patrick Zheng <[email protected]>
shizhMSFT
shizhMSFT previously approved these changes Mar 31, 2023
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Signed-off-by: Patrick Zheng <[email protected]>
notation.go Outdated Show resolved Hide resolved
notation.go Outdated Show resolved Hide resolved
Signed-off-by: Patrick Zheng <[email protected]>
notation.go Outdated Show resolved Hide resolved
Signed-off-by: Patrick Zheng <[email protected]>
Signed-off-by: Patrick Zheng <[email protected]>
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yizha1
Copy link
Contributor

yizha1 commented Apr 10, 2023

@priteshbandi Could you take another pass at this PR?

verifier/verifier.go Show resolved Hide resolved
verifier/verifier.go Show resolved Hide resolved
registry/repository.go Show resolved Hide resolved
Copy link
Contributor

@priteshbandi priteshbandi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@patrickzheng200 patrickzheng200 merged commit cd1a135 into notaryproject:main Apr 19, 2023
@patrickzheng200 patrickzheng200 deleted the local-rc4 branch April 19, 2023 05:01
shizhMSFT pushed a commit to notaryproject/notation that referenced this pull request Apr 20, 2023
This PR adds local sign/list/verification for OCI image layout
directory.
For RC.4:
1. It only supports storing the generated signature into the target OCI
layout directory.
2. It supports listing signatures within the OCI layout directory.
3. It only supports verifying signatures within the target OCI layout
directory.

This PR is based on spec PR:
#601 (Merged).

This PR is dependent on the corresponding notation-go PR:
notaryproject/notation-go#288.
Please review the notation-go PR first.

Resolves #283.

Both remote registry and oci-layout scenario are tested. E2E tests are
also included.

---------

Signed-off-by: Patrick Zheng <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

9 participants