目录
当前位置: 首页 > 文档资料 > Yubikey 使用手册 >

轮换钥匙 - 时间戳钥匙

优质
小牛编辑
119浏览
2023-12-01

Timestamp key

The timestamp key can also be rotated:

  1. ❯ notary -D -v -s https://127.0.0.1:4443 -d ~/.docker/trust key rotate <aws_account_id>.dkr.ecr.us-east-1.amazonaws.com/app timestamp -r
  2. Enter the User Pin for the attached Yubikey:
  3. Please touch the attached Yubikey to perform signing.
  4. Successfully rotated timestamp key for repository <aws_account_id>.dkr.ecr.us-east-1.amazonaws.com/app

This will require removing the timestamp.json file on each collaborator machine:

  1. rm ~/.docker/trust/tuf/<aws_account_id>.dkr.ecr.us-east-1.amazonaws.com/app/metadata/timestamp.json