Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE] Upgrade to using GPG Keys like everyone else. #2089

Open
rickmacgillis opened this issue Sep 14, 2019 · 1 comment
Open

[FEATURE] Upgrade to using GPG Keys like everyone else. #2089

rickmacgillis opened this issue Sep 14, 2019 · 1 comment

Comments

@rickmacgillis
Copy link

docker login is a VERY complicated process just to keep our login info out of a clear text file. Even following the multi-step article to use a password manager results in an hour's worth of work or more to figure out why it can't find pass, and I still haven't figured out why it can't find it when I just installed and initialized it. (HINT: the following does NOT work.)

{
	"auths": {},
	"HttpHeaders": {
		"User-Agent": "Docker-Client/18.09.7 (linux)"
	},
	"credsStore": "pass"
}

So, let's look at the usual way things work.

  1. GitHub authentication with git? pubkey pasted into the GitHub interface.
  2. GitLab authentication? pubkey pasted into the GitLab interface.
  3. Bitbucket authentication? pubkey pasted into the Bitbucket interface.
  4. Docker authentication? Cleartext username and password unless you install some obscure software, configure that obscure software with GPG, and then hope you get lucky and Docker can find the obscure software it relies on.

Do we see a problem? Please make your client work like git does and allow devs to simply paste their pubkey into their docker.com account. It's ALWAYS best to keep to what people know so they don't have to learn something new just to use your product.

@jaswdr
Copy link

jaswdr commented Oct 19, 2019

@rickmacgillis the problem is that your are not obligated to use docker.com, you can set up a registrar server yourself. I think is important to keep in this way, check this link https://docs.docker.com/registry/spec/auth/, you can setup an OAuth2 server for authentication.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants