Owen W. Taylor c75ba1c7e1 common: Implement /etc/containers/certs.d for OCI registries ...

Docker and podman can be configured to use mutual TLS authentication
to the registry by dropping files into system-wide and user
directories. Implement this in a largely compatible way.

(Because of the limitations of our underlying libraries, we
can't support multiple certificates within the same host config,
but I don't expect anybody actually needs that.)

The certs.d handling is extended so that certificates are separately
looked up when downloading the look-aside index. This is mostly
to simplify our tests, so we can use one web server for both -
in actual operation, we expect the indexes to be unauthenticated.

Also for testing purposes, FLATPAK_CONTAINER_CERTS_D is supported
to override the standard search path.

Co-authored-by: Sebastian Wick <sebastian.wick@redhat.com>

2025-05-08 16:08:21 +00:00

..

ISSUE_TEMPLATE

github: add 'needs triage' by default

2024-02-10 12:06:07 -06:00

workflows

common: Implement /etc/containers/certs.d for OCI registries

2025-05-08 16:08:21 +00:00

FUNDING.yml

.github: Add Sponsor button

2021-08-02 08:16:47 +02:00