Skip to content

Commit f46e2b1

Browse files
Merge pull request #215136 from tejaswikolli-web/14412364
Content trust supportability edit for image import.
2 parents 3662589 + 79c92d8 commit f46e2b1

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

articles/container-registry/container-registry-content-trust.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,9 @@ Important to any distributed system designed with security in mind is verifying
2121

2222
As an image publisher, content trust allows you to **sign** the images you push to your registry. Consumers of your images (people or systems pulling images from your registry) can configure their clients to pull *only* signed images. When an image consumer pulls a signed image, their Docker client verifies the integrity of the image. In this model, consumers are assured that the signed images in your registry were indeed published by you, and that they've not been modified since being published.
2323

24+
> [!NOTE]
25+
> Azure Container Registry (ACR) does not support `acr import` to import images signed with Docker Content Trust (DCT). By design, the signatures are not visible after the import, and the notary v2 stores these signatures as artifacts.
26+
2427
### Trusted images
2528

2629
Content trust works with the **tags** in a repository. Image repositories can contain images with both signed and unsigned tags. For example, you might sign only the `myimage:stable` and `myimage:latest` images, but not `myimage:dev`.

0 commit comments

Comments
 (0)