Description
Currently the engine ID shown in docker info is the fingerprint ID used to sign the deprecated manifest schema v1. The key signature and finger on these manifests are not checked or used any longer for security, deprecated by notary. So, given this context, we could:
- Generate ephemeral
fingerprint keys to push the v1 manifests
- Replace the current
engine ID with an UUID generated once
Suggested format
Location: <docker_storage_directory>/engine_uuid
/var/lib/docker # cat engine_uuid
0df9fdce-f163-41f0-92bb-d0df29dd79bc
/var/lib/docker #
/cc @dmp42 @friism
Description
Currently the
engine IDshown indocker infois thefingerprint IDused tosignthe deprecatedmanifest schema v1. The key signature and finger on these manifests are not checked or used any longer for security, deprecated by notary. So, given this context, we could:fingerprintkeys to push thev1manifestsengine IDwith anUUIDgenerated onceSuggested format
Location:
<docker_storage_directory>/engine_uuid/cc @dmp42 @friism