Skip to content

Commit 417185d

Browse files
committed
chore: improved verify instructions
* No need for root user * Added how to use the remote key * Added how to use a local key (missing volume mount)
1 parent 3c9eb8f commit 417185d

File tree

1 file changed

+23
-5
lines changed

1 file changed

+23
-5
lines changed

tasks/ai-library-apps-verifying.adoc

Lines changed: 23 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ Run the following command to verify artifacts hosted on the {sappco}.
3232

3333
[source,bash,subs="+attributes"]
3434
----
35-
{prompt_root}docker run --rm dp.apps.rancher.io/containers/cosign:2 \
35+
{prompt_user}docker run --rm dp.apps.rancher.io/containers/cosign:2 \
3636
verify dp.apps.rancher.io/containers/milvus:2.6.9 \
3737
--registry-username <SUSE_APPLICATION_COLLECTION_USERNAME> \ <.>
3838
--registry-password <SUSE_APPLICATION_COLLECTION_PASSWORD> \ <.>
@@ -50,23 +50,41 @@ Refer to link:https://documentation.suse.com/container/all/single-html/Container
5050
You can either download the link:/suse-ai/files/sr-pubkey.pem[public key] file or create it by saving the key's content as a text file:
5151
[source]
5252
----
53+
{prompt_user}cat <<EOF >./suse-ai-pubkey.pem
5354
-----BEGIN PUBLIC KEY-----
5455
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyeQH2ZWIPhRP+gvznCze1XjosF+M
5556
RcYK1NYqHrJdicDHaVuY8wRvOWOb3dk87rD4XTRa1PA4OHIukef1lshEfQ==
5657
-----END PUBLIC KEY-----
58+
EOF
5759
----
5860

5961
Run the following command to verify artifacts hosted on the {sregistry}.
6062

6163
[source,bash,subs="+attributes"]
6264
----
63-
{prompt_root}docker run --rm dp.apps.rancher.io/containers/cosign:2 \
65+
{prompt_user}docker run --rm \
66+
dp.apps.rancher.io/containers/cosign:2 \
6467
verify registry.suse.com/ai/containers/qdrant:v1.16.3 \
6568
--registry-username SUSE_REGISTRY_USERNAME \ <.>
6669
--registry-password SUSE_REGISTRY_PASSWORD \ <.>
67-
--key <PUBLIC_KEY_FILE> <.>
70+
--key https://documentation.suse.com/suse-ai/files/sr-pubkey.pem
6871
----
6972
<.> Provide {sregistry} user name.
7073
<.> Provide {sregistry} password.
71-
<.> Provide a path to the public key file.
72-
====
74+
====
75+
76+
Or by mounting the previously created pem file:
77+
78+
[source,bash,subs="+attributes"]
79+
----
80+
{prompt_user}docker run --rm \
81+
-v $(pwd)/suse-ai-pubkey.pem:/suse-ai-pubkey.pem \
82+
dp.apps.rancher.io/containers/cosign:2 \
83+
verify registry.suse.com/ai/containers/qdrant:v1.16.3 \
84+
--registry-username SUSE_REGISTRY_USERNAME \ <.>
85+
--registry-password SUSE_REGISTRY_PASSWORD \ <.>
86+
--key /suse-ai-pubkey.pem <.>
87+
----
88+
<.> Provide {sregistry} user name.
89+
<.> Provide {sregistry} password.
90+
====

0 commit comments

Comments
 (0)