{"id":1259,"date":"2024-07-23T12:16:48","date_gmt":"2024-07-23T12:16:48","guid":{"rendered":"https:\/\/dockerpros.com\/?post_type=glossary&p=1259"},"modified":"2024-07-23T12:21:54","modified_gmt":"2024-07-23T12:21:54","slug":"docker-notary","status":"publish","type":"glossary","link":"https:\/\/dockerpros.com\/it\/wiki\/docker-notary\/","title":{"rendered":"Docker Notary"},"content":{"rendered":"

Understanding Docker Notary: Ensuring Trustworthy Software Delivery<\/h1>\n

Docker Notary is an open-source project that provides a framework for signing and verifying the integrity of container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> images within the Docker ecosystem. It employs a robust system of cryptographic signatures and trust management to ensure that only trusted and verified images are deployed in production environments. By allowing developers and organizations to guarantee the authenticity and integrity of their container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> images, Docker Notary plays a crucial role in securing the software supply chain and mitigating the risks associated with deploying unverified code.<\/p>\n

The Need for Image Signing and Trust<\/h2>\n

In the rapidly evolving landscape of DevOps and container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> orchestrazione<\/a><\/span>Orchestration refers to the automated management and coordination of complex systems and services. It optimizes processes by integrating various components, ensuring efficient operation and resource utilization. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>, the ease of deploying applications has significantly increased. However, this ease comes with inherent risks, particularly regarding the security of container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> images. Unsigned or unverified images can introduce vulnerabilities or malicious code, leading to severe security breaches and data loss.<\/p>\n

Man mano che le organizzazioni adottano architetture a microservizi e pratiche di integrazione\/distribuzione continua (CI\/CD), la sfida di mantenere la fiducia nella catena di fornitura del software \u00e8 diventata fondamentale. Docker Notary affronta queste sfide consentendo agli sviluppatori di firmare le proprie immagini, stabilendo cos\u00ec una catena di fiducia verificabile in qualsiasi fase della distribuzione. Ci\u00f2 garantisce che all'interno delle applicazioni vengano utilizzati solo componenti verificati e attendibili.<\/p>\n

Come funziona Docker Notary<\/h2>\n

Architecture Overview<\/h3>\n

Docker Notary opera utilizzando un'architettura client-server. I componenti principali coinvolti sono:<\/p>\n

    \n
  1. \n

    Server di Notarizzazione<\/strong>Questo componente \u00e8 responsabile della memorizzazione e della gestione dei metadati relativi alle immagini firmate, incluse le chiavi pubbliche e le stesse firme.<\/p>\n<\/li>\n

  2. \n

    Notaio firmatario<\/strong>: The signer is responsible for signing the metadata. It generates the cryptographic signatures that validate the integrity and authenticity of the container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> images.<\/p>\n<\/li>\n

  3. \n

    Cliente del Notaio<\/strong>Questo client interagisce sia con il Notary Server che con il Docker Registry<\/a><\/span>A Docker Registry is a storage and distribution system for Docker images. It allows developers to upload, manage, and share container images, facilitating efficient deployment in diverse environments. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>. Facilita il processo di firma e verifica le firme quando si estraggono o si inviano immagini.<\/p>\n<\/li>\n

  4. \n

    Trust Deposito<\/a><\/span>A repository is a centralized location where data, code, or documents are stored, managed, and maintained. It facilitates version control, collaboration, and efficient resource sharing among users. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/strong>Quando un immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> is signed, its metadata is stored in a trust repository<\/a><\/span>A repository is a centralized location where data, code, or documents are stored, managed, and maintained. It facilitates version control, collaboration, and efficient resource sharing among users. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/span><\/span>, which acts as a verifiable source of truth regarding the image’s state.<\/p>\n<\/li>\n<\/ol>\n

    Processo di Firma<\/h3>\n

    Il processo di firma in Docker Notary pu\u00f2 essere scomposto nelle seguenti fasi:<\/p>\n

      \n
    1. \n

      Generazione della chiave<\/strong>Ogni utente o organizzazione genera una coppia di chiavi crittografiche (chiave pubblica e privata). La chiave privata viene mantenuta sicura, mentre quella pubblica \u00e8 condivisa con il Notary Server.<\/p>\n<\/li>\n

    2. \n

      Immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> Signing<\/strong>Quando un immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> is built, the Notary Client generates a signature based on the metadata of the immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> (e.g., digest, tags). This signature is then sent to the Notary Signer, which signs the metadata and stores it in the Notary Server.<\/p>\n<\/li>\n

    3. \n

      Stabilimento della fiducia<\/strong>: The public key is associated with a specific identity (e.g., an organization or developer). This establishes a trust relationship\u2014only images signed by trusted keys will be considered valid.<\/p>\n<\/li>\n

    4. \n

      Immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> Verification<\/strong>: When pulling an immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> da registry<\/a><\/span>A registry is a centralized database that stores information about various entities, such as software installations, system configurations, or user data. It serves as a crucial component for system management and configuration. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>, the Docker client checks the Notary Server for the corresponding signature. If the immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> is signed with a trusted key, the immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> is pulled; otherwise, an error is raised.<\/p>\n<\/li>\n<\/ol>\n

      Revoca del Trust<\/h3>\n

      One critical aspect of Docker Notary is the ability to revoke signatures associated with compromised keys. If a private key is believed to have been exposed, the associated public key can be marked as revoked on the Notary Server. This ensures that any immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> signed with the compromised key will not be trusted, enhancing the security of the overall system.<\/p>\n

      Vantaggi dell'utilizzo di Docker Notary\n\nDocker Notary \u00e8 uno strumento di sicurezza che consente di verificare l'autenticit\u00e0 e l'integrit\u00e0 delle immagini Docker. Ecco alcuni dei principali vantaggi dell'utilizzo di Docker Notary:\n\n1. **Verifica dell'autenticit\u00e0**: Docker Notary utilizza firme digitali per garantire che le immagini Docker provengano da fonti attendibili. Questo aiuta a prevenire l'uso di immagini contraffatte o modificate.\n\n2. **Integrit\u00e0 dei dati**: Le firme digitali di Docker Notary assicurano che le immagini Docker non siano state modificate dopo la firma. Questo garantisce che le immagini siano integre e non siano state alterate da terze parti.\n\n3. **Controllo degli accessi**: Docker Notary consente di definire chi pu\u00f2 firmare le immagini Docker e chi pu\u00f2 verificare le firme. Questo aiuta a controllare l'accesso alle immagini e a prevenire l'uso non autorizzato.\n\n4. **Audit trail**: Docker Notary mantiene un registro delle firme digitali, che pu\u00f2 essere utilizzato per tracciare chi ha firmato le immagini Docker e quando. Questo aiuta a identificare eventuali problemi di sicurezza e a risalire alle loro cause.\n\n5. **Integrazione con Docker Hub**: Docker Notary \u00e8 integrato con Docker Hub, il registro ufficiale delle immagini Docker. Questo rende facile l'utilizzo di Docker Notary per verificare le immagini Docker scaricate da Docker Hub.\n\n6. **Supporto per pi\u00f9 algoritmi di firma**: Docker Notary supporta diversi algoritmi di firma, tra cui RSA e ECDSA. Questo consente di scegliere l'algoritmo pi\u00f9 adatto alle proprie esigenze di sicurezza.\n\n7. **Facilit\u00e0 d'uso**: Docker Notary \u00e8 facile da usare e pu\u00f2 essere integrato facilmente nei flussi di lavoro esistenti. Questo lo rende una soluzione pratica per migliorare la sicurezza delle immagini Docker.\n\nIn sintesi, Docker Notary \u00e8 uno strumento potente che pu\u00f2 aiutare a migliorare la sicurezza delle immagini Docker. Offre una serie di vantaggi, tra cui la verifica dell'autenticit\u00e0, l'integrit\u00e0 dei dati, il controllo degli accessi, l'audit trail, l'integrazione con Docker Hub, il supporto per pi\u00f9 algoritmi di firma e la facilit\u00e0 d'uso.<\/h2>\n

      Sicurezza Migliorata<\/h3>\n

      Docker Notary migliora significativamente la sicurezza complessiva delle applicazioni containerizzate. Garantendo che vengano distribuite solo immagini firmate provenienti da fonti attendibili, le organizzazioni possono proteggersi dagli attacchi alla catena di fornitura e ridurre il rischio di introdurre vulnerabilit\u00e0 negli ambienti di produzione.<\/p>\n

      Conformit\u00e0 e Governance<\/h3>\n

      Many industries have strict compliance requirements regarding software deployment and security. Using Docker Notary allows organizations to maintain detailed records of who signed what images and when, facilitating audits and compliance with regulations.<\/p>\n

      Improved Collaboration<\/h3>\n

      In organizations where multiple teams or developers contribute to a shared container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> repository<\/a><\/span>A repository is a centralized location where data, code, or documents are stored, managed, and maintained. It facilitates version control, collaboration, and efficient resource sharing among users. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/span><\/span>, Docker Notary fosters trust and collaboration. Teams can be confident that they are using tested and vetted components, leading to smoother integration and deployment processes.<\/p>\n

      Supporto per i flussi di lavoro con multifirma<\/h3>\n

      Docker Notary supports multi-signature workflows, allowing multiple parties to sign an immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> before it is considered trusted. This feature is particularly useful in larger organizations and open-source projects where consensus is required before deploying changes.<\/p>\n

      Implementing Docker Notary<\/h2>\n

      Prerequisiti<\/h3>\n

      Before implementing Docker Notary, ensure you have the following prerequisites:<\/p>\n

        \n
      1. \n

        Installazione di Docker<\/strong>Assicurati che Docker sia installato e configurato correttamente sulla tua macchina locale o server.<\/p>\n<\/li>\n

      2. \n

        Docker Registry<\/a><\/span>A Docker Registry is a storage and distribution system for Docker images. It allows developers to upload, manage, and share container images, facilitating efficient deployment in diverse environments. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/strong>: You need access to a Docker registry<\/a><\/span>A Docker Registry is a storage and distribution system for Docker images. It allows developers to upload, manage, and share container images, facilitating efficient deployment in diverse environments. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> where you can push and pull images.<\/p>\n<\/li>\n

      3. \n

        Notary Installation<\/strong>Installare Docker Notary seguendo le istruzioni ufficiali Documentazione notarile<\/a>.<\/p>\n<\/li>\n<\/ol>\n

        Setting Up Notary<\/h3>\n
          \n
        1. \n

          Inizializza Notaio<\/strong>: Use the Notary CLI to initialize a new repository<\/a><\/span>A repository is a centralized location where data, code, or documents are stored, managed, and maintained. It facilitates version control, collaboration, and efficient resource sharing among users. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/span><\/span> for your images:<\/p>\n

          notary init <\/code><\/pre>\n<\/li>\n
        2. \n
          Generate Keys<\/strong>: Generate the necessary keys for signing:<\/p>\n
          notary key generate<\/code><\/pre>\n<\/li>\n
        3. \n
          Sign an Immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/strong>: To sign a Docker immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>, first build your immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>:<\/p>\n
          docker build -t : .<\/code><\/pre>\n
          Then, sign the immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> with Notary:<\/p>\n
          firma del notaio<\/code><\/pre>\n<\/li>\n
        4. \n
          Push to the Registry<\/a><\/span>A registry is a centralized database that stores information about various entities, such as software installations, system configurations, or user data. It serves as a crucial component for system management and configuration. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span><\/strong>: After signing, push the immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> along with its signature to the Docker registry<\/a><\/span>A Docker Registry is a storage and distribution system for Docker images. It allows developers to upload, manage, and share container images, facilitating efficient deployment in diverse environments. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>:<\/p>\n
          docker push :<\/code><\/pre>\n<\/li>\n<\/ol>\n
          Verifica delle Immagini<\/h3>\n
          When pulling a signed immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span>, Docker will automatically verify the signature against the Notary Server:<\/p>\n
          docker pull :<\/code><\/pre>\n
          Se il immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> is signed by a trusted key, it will be pulled; otherwise, an error message will be displayed.<\/p>\n
          Sfide e limitazioni<\/h2>\n
          Sebbene Docker Notary offra vantaggi significativi, presenta anche alcune sfide:<\/p>\n
          Complessit\u00e0 della gestione delle chiavi<\/h3>\n
          Managing cryptographic keys can become complex, especially in larger organizations. Ensuring that keys are secure and properly rotated requires diligent administrative practices.<\/p>\n
          Sovraccarico di prestazioni<\/h3>\n
          Adding an additional layer of verification may introduce latency in the CI\/CD pipeline. Organizations must weigh the importance of security against the potential impact on deployment speed.<\/p>\n
          Integration with Existing Workflows<\/h3>\n
          Integrating Docker Notary into existing workflows may require adjustments to CI\/CD pipelines and developer practices. Training and documentation are essential to facilitate a smooth transition.<\/p>\n
          Best Practices for Using Docker Notary<\/h2>\n
            \n
          1. \n
            Automate the Signing Process<\/strong>: Integra la firma nel tuo pipeline CI\/CD per semplificare il flusso di lavoro e garantire che tutte le immagini siano automaticamente firmate prima della distribuzione.<\/p>\n<\/li>\n
          2. \n
            Implementare flussi di lavoro multifirma<\/strong>Per applicazioni critiche, prendi in considerazione l'uso di flussi di lavoro multi-firma per aumentare la fiducia e la responsabilit\u00e0.<\/p>\n<\/li>\n
          3. \n
            Ruota regolarmente le chiavi<\/strong>: Implementare una politica di rotazione delle chiavi per migliorare la sicurezza e ridurre il rischio di compromissione delle chiavi.<\/p>\n<\/li>\n
          4. \n
            Monitor and Audit Signatures<\/strong>: Regularly review signed images and their associated keys to ensure compliance and identify any potential issues.<\/p>\n<\/li>\n
          5. \n
            Istruisci i team<\/strong>: Provide training and resources for development and operations teams to understand the importance of immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> signing and how to leverage Docker Notary effectively.<\/p>\n<\/li>\n<\/ol>\n
            Conclusione<\/h2>\n
            Docker Notary is a vital tool for any organization leveraging container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> technology. By implementing a robust signing and verification process, Notary enhances the security of the software supply chain, fosters trust among development teams, and ensures compliance with industry regulations. While challenges exist, adopting best practices and fully integrating Docker Notary into CI\/CD workflows can vastly improve an organization\u2019s resilience against security risks.<\/p>\n
            As the landscape of software development continues to evolve, the importance of tools like Docker Notary will only grow, making it essential for organizations to prioritize secure immagine<\/a><\/span>An image is a visual representation of an object or scene, typically composed of pixels in digital formats. It can convey information, evoke emotions, and facilitate communication across various media. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> management and deployment strategies in their DevOps practices. With Docker Notary in place, organizations can confidently embrace the power of containers while maintaining a strong security posture, ultimately leading to more robust and trustworthy software delivery.<\/p>","protected":false},"excerpt":{"rendered":"
            Docker Notary \u00e8 uno strumento che fornisce la firma e la verifica automatizzate di container<\/a><\/span>Containers are lightweight, portable units that encapsulate software and its dependencies, enabling consistent execution across different environments. They leverage OS-level virtualization for efficiency. More \u00bb<\/a><\/span><\/span><\/span><\/span><\/span> immagini, garantendone l'integrit\u00e0 e l'autenticit\u00e0. Utilizza The Update Framework (TUF) per la distribuzione sicura.<\/p>","protected":false},"author":1,"featured_media":1835,"parent":0,"template":"","glossary-cat":[],"class_list":["post-1259","glossary","type-glossary","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\nDocker Notary - Dockerpros<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dockerpros.com\/it\/wiki\/docker-notary\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Docker Notary - Dockerpros\" \/>\n<meta property=\"og:description\" content=\"Docker Notary is a tool that provides automated signing and verification of container images, ensuring their integrity and authenticity. It employs The Update Framework (TUF) for secure distribution.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dockerpros.com\/it\/wiki\/docker-notary\/\" \/>\n<meta property=\"og:site_name\" content=\"Dockerpros\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-23T12:21:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/\",\"url\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/\",\"name\":\"Docker Notary - Dockerpros\",\"isPartOf\":{\"@id\":\"https:\/\/dockerpros.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg\",\"datePublished\":\"2024-07-23T12:16:48+00:00\",\"dateModified\":\"2024-07-23T12:21:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dockerpros.com\/wiki\/docker-notary\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/#primaryimage\",\"url\":\"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg\",\"contentUrl\":\"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg\",\"width\":800,\"height\":600,\"caption\":\"docker-notary-2\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dockerpros.com\/wiki\/docker-notary\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dockerpros.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Glossary\",\"item\":\"https:\/\/dockerpros.com\/fr\/wiki\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Docker Notary\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dockerpros.com\/#website\",\"url\":\"https:\/\/dockerpros.com\/\",\"name\":\"Dockerpros\",\"description\":\"DockerPros \u2013 Your Ultimate Docker Resource Hub\",\"publisher\":{\"@id\":\"https:\/\/dockerpros.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dockerpros.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/dockerpros.com\/#organization\",\"name\":\"Dockerpros\",\"url\":\"https:\/\/dockerpros.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/dockerpros.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/Dockerpros_logo_blanco.png\",\"contentUrl\":\"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/Dockerpros_logo_blanco.png\",\"width\":532,\"height\":114,\"caption\":\"Dockerpros\"},\"image\":{\"@id\":\"https:\/\/dockerpros.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Docker Notary - Dockerpros\n\nNotary is a Docker project that allows you to receive and manage trusted content. It accomplishes this by using The Update Framework (TUF), a framework designed to secure new update systems. TUF provides flexible and configurable security by offering a framework for developers to secure new and existing software update systems.\n\nNotary is a server and client for creating and managing trusted collections of content, with the aim of making the internet more secure by offering trust over any content. It provides a client and a server for publishing and managing trusted collections of content, as well as a runtime environment for clients to access these collections. The Notary server provides the Notary client with access to trusted collections and is responsible for the actual publishing of the content. The Notary client is used to create and manage collections and to publish them to the Notary server.\n\nThe Notary server is written in Go and is available as a Docker image. The Notary client is also written in Go and is available as a command-line tool. Both the server and the client are open source and available on GitHub.\n\nNotary is designed to be used with Docker Content Trust, which is a feature of Docker that allows you to verify the integrity and publisher of Docker images. When you enable Docker Content Trust, Docker will only pull images that are signed with a trusted key. This helps to ensure that the images you are using are authentic and have not been tampered with.\n\nNotary is a powerful tool for securing the distribution of content over the internet. It provides a way to create and manage trusted collections of content, and to verify the integrity and publisher of that content. This can help to prevent the distribution of malicious or tampered-with content, and can help to ensure that the content you are using is authentic and trustworthy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dockerpros.com\/it\/wiki\/docker-notary\/","og_locale":"it_IT","og_type":"article","og_title":"Docker Notary - Dockerpros","og_description":"Docker Notary is a tool that provides automated signing and verification of container images, ensuring their integrity and authenticity. It employs The Update Framework (TUF) for secure distribution.","og_url":"https:\/\/dockerpros.com\/it\/wiki\/docker-notary\/","og_site_name":"Dockerpros","article_modified_time":"2024-07-23T12:21:54+00:00","og_image":[{"width":800,"height":600,"url":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Tempo di lettura stimato":"6 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/dockerpros.com\/wiki\/docker-notary\/","url":"https:\/\/dockerpros.com\/wiki\/docker-notary\/","name":"Docker Notary - Dockerpros\n\nNotary is a Docker project that allows you to receive and manage trusted content. It accomplishes this by using The Update Framework (TUF), a framework designed to secure new update systems. TUF provides flexible and configurable security by offering a framework for developers to secure new and existing software update systems.\n\nNotary is a server and client for creating and managing trusted collections of content, with the aim of making the internet more secure by offering trust over any content. It provides a client and a server for publishing and managing trusted collections of content, as well as a runtime environment for clients to access these collections. The Notary server provides the Notary client with access to trusted collections and is responsible for the actual publishing of the content. The Notary client is used to create and manage collections and to publish them to the Notary server.\n\nThe Notary server is written in Go and is available as a Docker image. The Notary client is also written in Go and is available as a command-line tool. Both the server and the client are open source and available on GitHub.\n\nNotary is designed to be used with Docker Content Trust, which is a feature of Docker that allows you to verify the integrity and publisher of Docker images. When you enable Docker Content Trust, Docker will only pull images that are signed with a trusted key. This helps to ensure that the images you are using are authentic and have not been tampered with.\n\nNotary is a powerful tool for securing the distribution of content over the internet. It provides a way to create and manage trusted collections of content, and to verify the integrity and publisher of that content. This can help to prevent the distribution of malicious or tampered-with content, and can help to ensure that the content you are using is authentic and trustworthy.","isPartOf":{"@id":"https:\/\/dockerpros.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dockerpros.com\/wiki\/docker-notary\/#primaryimage"},"image":{"@id":"https:\/\/dockerpros.com\/wiki\/docker-notary\/#primaryimage"},"thumbnailUrl":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg","datePublished":"2024-07-23T12:16:48+00:00","dateModified":"2024-07-23T12:21:54+00:00","breadcrumb":{"@id":"https:\/\/dockerpros.com\/wiki\/docker-notary\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dockerpros.com\/wiki\/docker-notary\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/dockerpros.com\/wiki\/docker-notary\/#primaryimage","url":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg","contentUrl":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/docker-notary_1259.jpg","width":800,"height":600,"caption":"docker-notary-2"},{"@type":"BreadcrumbList","@id":"https:\/\/dockerpros.com\/wiki\/docker-notary\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dockerpros.com\/"},{"@type":"ListItem","position":2,"name":"Glossary","item":"https:\/\/dockerpros.com\/fr\/wiki\/"},{"@type":"ListItem","position":3,"name":"Docker Notary"}]},{"@type":"WebSite","@id":"https:\/\/dockerpros.com\/#website","url":"https:\/\/dockerpros.com\/","name":"Esperti Docker","description":"DockerPros \u2013 Il tuo punto di riferimento definitivo per Docker","publisher":{"@id":"https:\/\/dockerpros.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dockerpros.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/dockerpros.com\/#organization","name":"Esperti Docker","url":"https:\/\/dockerpros.com\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/dockerpros.com\/#\/schema\/logo\/image\/","url":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/Dockerpros_logo_blanco.png","contentUrl":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/Dockerpros_logo_blanco.png","width":532,"height":114,"caption":"Dockerpros"},"image":{"@id":"https:\/\/dockerpros.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/glossary\/1259","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/types\/glossary"}],"author":[{"embeddable":true,"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":0,"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/glossary\/1259\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/media\/1835"}],"wp:attachment":[{"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/media?parent=1259"}],"wp:term":[{"taxonomy":"glossary-cat","embeddable":true,"href":"https:\/\/dockerpros.com\/it\/wp-json\/wp\/v2\/glossary-cat?post=1259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}