The notation repo contains the following:
notation
- A CLI for signing and verifying artifacts with Notationdocker-generate
- Extends docker withdocker generate
to create locally persisted manifest for signing, without having to push to a registry.docker-notation
- Extends docker withdocker notation
to enable, sign and verify Notation signatures.
Building above binaries require golang with version >= 1.17
.
- Build the binaries, installing them to:
~/bin/notation
~/.docker/cli-plugins/docker-generate
~/.docker/cli-plugins/docker-notation
git clone https://github.com/notaryproject/notation.git cd notation make install
- Verify binaries are installed
docker --help # look for Management Commands: generate* Generate artifacts (CNCF Notary Project, 0.1.0) notation* Manage signatures on Docker images (CNCF Notary Project, 0.5.3-alpha) which notation # output /home/<user>/bin/notation