Skip to content

Latest commit

 

History

History

notation

readme.md

Notation Image Verification

This Demo uses the quickstart example from the Notation project.

notation-demo.mp4

Setup

Run Nomad and proxy

sudo nomad agent -dev -bind=0.0.0.0
nacp -config notation.conf.hcl

Run Docker Registry

nomad job run registry.nomad

Build and push image

docker build -t localhost:5001/net-monitor:v1 https://github.com/wabbit-networks/net-monitor.git#main
docker push localhost:5001/net-monitor:v1

Run Nomad Job

export IMAGE=$(docker inspect --format='{{index .RepoDigests 0}}' localhost:5001/net-monitor:v1)

export NOMAD_ADDR=http://localhost:6464

nomad job run -var "image=${IMAGE}" demo.nomad

# should fail
# now sign image

notation sign $IMAGE

nomad job run -var "image=${IMAGE}" demo.nomad