This document describes the general settings you need to configure including using Trusted Content through setting up your Notary server.
Each setting on this page is explained in the Docker Trusted Registry UI.
If you need the Trusted Registry to re-generate a self-signed certificate at some point, you can change the domain name. Whenever the domain name does not match the current certificate, a new self-signed certificate is generated for the new domain. This also works with IP addresses.
The Trusted Registry’s includes integration with of Docker Notary to provide Content Trust functionality, allowing your organization to push and pull trusted images. After pushing images in the Trusted Registry, you can see which image tags were signed by viewing the appropriate repositories through Trusted Registry’s web interface.
To configure your Docker client to be able to push signed images to Docker Trusted Registry refer to the CLI Reference’s Environment Variables Section and Notary Section.
This requires you to set the DOCKER_CONTENT_TRUST
variable and configure
your system to trust Docker Trusted Registry’s TLS certificate if it doesn’t
already.