Docker Content Trust (DCT)
Code integrity is extremely important, especially if you are running a cryptocurrency exchange.
Since HollaEx Kit is an open-source project, you can verify the code at any time by going to Github, but sometimes it's not enough. Internet is a wild jungle and you can't always trust what you download is what you intended to get.
Docker Content Trust is the savior in this context. It helps you to verify the image integrity. It has digital signatures signed by the issuers. By checking it, you can verify that the image is provided by the trustable issuers and that it has not been corrupted or tampered with.
Here's the way how you can check the image signature to check the image integrity
# To verify the Docker Image Registry's Integrity
docker trust inspect --pretty hollaex/hollaex-kit
Signatures for hollaex/hollaex-kit
SIGNED TAG DIGEST SIGNERS
2.6.0 646cfb4025a0c1bd9aa7f83b9caa3821f927320e7ab646edc091f7d1e6874099 kycfeel
2.6.1 852cc61067627f00b9b4b1873e9eb95968509e588fb6bf003a81e7fbc207e059 kycfeel
2.6.2 4d0ef0b68ba8c91c710e508090f16cf09fa629561bd7f89c3b2ba48aa87d2efa kycfeel
2.6.4 1d5ab0d9a625568f6c85fdba340ab9c5b95df6c93ecffd0b280154b7f6795923 bitholla-cicd
2.6.4-testnet-9f10d6c 4d7fbbf53c225aed9ea80f7f75d6c3d8e3cd30272409465907d675b99b6eda2f bitholla-cicd
2.6.5 823389853904a5ad3eac54c160307c3e278334d1747521be85901147ac0ef8c7 bitholla-cicd
2.6.5-testnet-8eaa2e6 5cbe291c226380e456df5c747ef2fc0ab0a3701abcb25e971f6a50c4784528d0 bitholla-cicd
2.6.5-testnet-35f20e3 978dc0a71d18abb734621bb2b1a8cf0efc31233f01736eaaa2a5d61ebf6a4db1 bitholla-cicd
2.6.5-testnet-845193c aa614edf4865a7bd101da9022b22220b6f4c6c7bea231cf844d9f4b1a0f94074 bitholla-cicd
2.6.6 c4d328852f6a5ef863a51ee565e50ff07902aafef241fa9df34a0efa28fa5c78 bitholla-cicd
2.6.6-testnet-33a79b5 1043084f699fd27d21e0cbe4af0782962833521b868ab82e9522964c5fa99552 bitholla-cicd
2.6.6-testnet-ac5b38a 7e0e2312cf453625fadb8ee490672db69044668a2b036a492014eeb71c6cce34 bitholla-cicd
2.7.0-testnet-2fbd466 68d9d42f11f6850fbdd8a369a97486f3ad1a8d04a1dea7f78e46784dc3f0563b bitholla-cicd
2.7.0-testnet-4ec79cc 69bd951957716d08a67f2adf954f4176273ae55eb08b40b5804a4e5354b3cc8d bitholla-cicd
2.7.0-testnet-70d9b05 e35beab2873a3eb23d915170f7323711019e1019f6ad78f124cf654638733dde bitholla-cicd
2.7.0-testnet-19001b5 71940d2d4678fc82a7ecfbe273c24df8e236a7c96bbe8a7684b24af450f3c47f bitholla-cicd
2.7.0-testnet-26793e3 e2002f772014ff7b8f68f85576441b9081544129e015da464f2007c2912ea40c bitholla-cicd
2.7.0-testnet-86884d5 b30a943229c359905a9873a735c83f278b86934877f83ae5895d741865d75663 bitholla-cicd
2.7.0-testnet-0301326 3e10a277e1ecbee6e348fe3ab5621c6d5bc99a98cafbc646a57102c1fd467183 bitholla-cicd
2.7.0-testnet-581684f dae03bfdb787d8cc544f06fda24b3a73be620bfebbd86fb4f0f08d75fc8d6e78 bitholla-cicd
2.7.0-testnet-aba85bb 40eb2f5e384187290d8e402180c809f5711241e84427d37ded08db061a362d6b bitholla-cicd
2.7.0-testnet-b054fab acbd85285bef78e1c87620a9c9b857b6d7c5ee3d5e7f1b2038fa384c4c338d86 bitholla-cicd
2.7.0-testnet-bbec3a1 c51088169963f57c8325b82823d6ae6d6c9a15b3cf6cd92bda1d156bda31409a bitholla-cicd
2.7.0-testnet-e7af264 33111e569fccc276da2d54cce2e184c83b658a1b669b32ef41527ff389309404 bitholla-cicd
List of signers and their keys for hollaex/hollaex-kit
SIGNER KEYS
bitholla-cicd 2aa7f2853b76, 88ce8696c017, e5d3558d7565
kycfeel 1174213aeba1
Administrative keys for hollaex/hollaex-kit
Repository Key: bc606a961f2aea3a06d9af261ed57f9dfb57a35731535a180fe2b198356d4e93
Root Key: cfca4876cdd17155f797a1b5db695b9ea6c0de652359919ac421da1a42aa3c54
# To verity the integrity of a specific image
docker trust inspect --pretty hollaex/hollaex-kit:2.6.6
Signatures for hollaex/hollaex-kit:2.6.6
SIGNED TAG DIGEST SIGNERS
2.6.6 c4d328852f6a5ef863a51ee565e50ff07902aafef241fa9df34a0efa28fa5c78 bitholla-cicd
List of signers and their keys for hollaex/hollaex-kit:2.6.6
SIGNER KEYS
bitholla-cicd 2aa7f2853b76, 88ce8696c017, e5d3558d7565
kycfeel 1174213aeba1
Administrative keys for hollaex/hollaex-kit:2.6.6
Repository Key: bc606a961f2aea3a06d9af261ed57f9dfb57a35731535a180fe2b198356d4e93
Root Key: cfca4876cdd17155f797a1b5db695b9ea6c0de652359919ac421da1a42aa3c54
In order to enforce pulling ONLY the DCT signed images for extra security you can set the following command for docker:
export DOCKER_CONTENT_TRUST=1
Last modified 2mo ago