mirror of
https://github.com/docker/cli.git
synced 2026-01-28 04:20:55 +03:00
c9bb291154
move the `trust` subcommands to a plugin, so that the subcommands can
be installed separate from the `docker trust` integration in push/pull
(for situations where trust verification happens on the daemon side).
make binary
go build -o /usr/libexec/docker/cli-plugins/docker-trust ./cmd/docker-trust
docker info
Client:
Version: 28.2.0-dev
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.24.0
Path: /usr/libexec/docker/cli-plugins/docker-buildx
trust: Manage trust on Docker images (Docker Inc.)
Version: unknown-version
Path: /usr/libexec/docker/cli-plugins/docker-trust
docker trust --help
Usage: docker trust [OPTIONS] COMMAND
Extended build capabilities with BuildKit
Options:
-D, --debug Enable debug logging
Management Commands:
key Manage keys for signing Docker images
signer Manage entities who can sign Docker images
Commands:
inspect Return low-level information about keys and signatures
revoke Remove trust for an image
sign Sign an image
Run 'docker trust COMMAND --help' for more information on a command.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
82 lines
2.3 KiB
Go
82 lines
2.3 KiB
Go
package trust
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/docker/cli-docs-tool/annotation"
|
|
"github.com/docker/cli/cli"
|
|
"github.com/docker/cli/cli-plugins/plugin"
|
|
"github.com/docker/cli/cli/command"
|
|
"github.com/docker/cli/cli/debug"
|
|
cliflags "github.com/docker/cli/cli/flags"
|
|
"github.com/spf13/cobra"
|
|
"github.com/spf13/pflag"
|
|
)
|
|
|
|
func NewRootCmd(name string, isPlugin bool, dockerCLI *command.DockerCli) *cobra.Command {
|
|
var opt rootOptions
|
|
cmd := &cobra.Command{
|
|
Use: name,
|
|
Short: "Manage trust on Docker images",
|
|
Long: `Extended build capabilities with BuildKit`,
|
|
Annotations: map[string]string{
|
|
annotation.CodeDelimiter: `"`,
|
|
},
|
|
CompletionOptions: cobra.CompletionOptions{
|
|
HiddenDefaultCmd: true,
|
|
},
|
|
PersistentPreRunE: func(cmd *cobra.Command, args []string) error {
|
|
if opt.debug {
|
|
debug.Enable()
|
|
}
|
|
// cmd.SetContext(appcontext.Context())
|
|
if !isPlugin {
|
|
// InstallFlags and SetDefaultOptions are necessary to match
|
|
// the plugin mode behavior to handle env vars such as
|
|
// DOCKER_TLS, DOCKER_TLS_VERIFY, ... and we also need to use a
|
|
// new flagset to avoid conflict with the global debug flag
|
|
// that we already handle in the root command otherwise it
|
|
// would panic.
|
|
nflags := pflag.NewFlagSet(cmd.DisplayName(), pflag.ContinueOnError)
|
|
options := cliflags.NewClientOptions()
|
|
options.InstallFlags(nflags)
|
|
options.SetDefaultOptions(nflags)
|
|
return dockerCLI.Initialize(options)
|
|
}
|
|
return plugin.PersistentPreRunE(cmd, args)
|
|
},
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
if len(args) == 0 {
|
|
return cmd.Help()
|
|
}
|
|
_ = cmd.Help()
|
|
return cli.StatusError{
|
|
StatusCode: 1,
|
|
Status: fmt.Sprintf("ERROR: unknown command: %q", args[0]),
|
|
}
|
|
},
|
|
}
|
|
if !isPlugin {
|
|
// match plugin behavior for standalone mode
|
|
// https://github.com/docker/cli/blob/6c9eb708fa6d17765d71965f90e1c59cea686ee9/cli-plugins/plugin/plugin.go#L117-L127
|
|
cmd.SilenceUsage = true
|
|
cmd.SilenceErrors = true
|
|
cmd.TraverseChildren = true
|
|
cmd.DisableFlagsInUseLine = true
|
|
}
|
|
|
|
cmd.AddCommand(
|
|
newRevokeCommand(dockerCLI),
|
|
newSignCommand(dockerCLI),
|
|
newTrustKeyCommand(dockerCLI),
|
|
newTrustSignerCommand(dockerCLI),
|
|
newInspectCommand(dockerCLI),
|
|
)
|
|
|
|
return cmd
|
|
}
|
|
|
|
type rootOptions struct {
|
|
debug bool
|
|
}
|