devteam/sharenet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix cosign installation steps
Some checks failed
CI/CD Pipeline (Fully Isolated DinD) / Run Tests (DinD) (push) Has been cancelled
Details
CI/CD Pipeline (Fully Isolated DinD) / Build and Push Docker Images (DinD) (push) Has been cancelled
Details
CI/CD Pipeline (Fully Isolated DinD) / Deploy to Production (push) Has been cancelled
Details

Browse source
This commit is contained in:
continuist 2025-08-24 21:46:37 -04:00
parent 8d387531f1
commit 1fb32f3366
1 changed files with 21 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
Docker_Registry_Install_Guide.md
View file

@ -433,17 +433,30 @@ sudo update-ca-certificates
# 4. Generate Cosign key pair for image signing # 4. Generate Cosign key pair for image signing
# Install Cosign (pinned + verified) # Install Cosign (pinned + verified)
COSIGN_VERSION=v2.2.4 # Vars
COSIGN_URL="https://github.com/sigstore/cosign/releases/download/${COSIGN_VERSION}/cosign-linux-amd64" COSIGN_VERSION=v2.5.3 # Replace with the latest stable release version
COSIGN_SHA256="<REPLACE_WITH_OFFICIAL_SHA256>" BASE="https://github.com/sigstore/cosign/releases/download/${COSIGN_VERSION}"
FILE="cosign-linux-amd64"
**⚠️ IMPORTANT:** Replace `<REPLACE_WITH_OFFICIAL_SHA256>` with the official release SHA256 before running. cd /tmp
curl -fsSL -o /usr/local/bin/cosign "$COSIGN_URL" # 1) Download binary + vendor checksums
echo "${COSIGN_SHA256} /usr/local/bin/cosign" | sha256sum -c - curl -fsSLO "${BASE}/${FILE}"
chmod +x /usr/local/bin/cosign curl -fsSLO "${BASE}/cosign_checksums.txt"
# Verify installation # 2) Verify SHA256 for the exact artifact
grep " ${FILE}$" cosign_checksums.txt | sha256sum -c -
# Expect: 'cosign-linux-amd64: OK'
# (If your 'cosign_checksums.txt' has CRLFs and the check fails, do:
# sed -i 's/\r$//' cosign_checksums.txt
# and run the check again.)
# 3) Install
sudo install -m 0755 "/tmp/${FILE}" /usr/local/bin/cosign
# 4) Sanity check
cosign version --json cosign version --json
# Generate Cosign key pair (or use keyless OIDC in CI) # Generate Cosign key pair (or use keyless OIDC in CI)