search

docker / for-win

Bug reports for Docker Desktop for Windows
https://www.docker.com/products/docker#/windows
1.87k stars 291 forks source link

Missing digital signatures on latest updates downloaded via Docker Desktop update mechanism #14396

Open wondering639 opened 4 weeks ago

wondering639 commented 4 weeks ago

Description

On later versions, I think starting around 4.35.0, updates downloaded directly via Docker Desktop are missing a digital signature. This is not the case when downloading the updates/installer directly from https://docs.docker.com/desktop/release-notes/

Reproduce

Download update via Docker Desktop -> Settings -> Software updates, apply&restart. Windows will show a UAC hint about an unknown publisher.

Expected behavior

No hint about an unknown publisher, instead Docker should be shown as publisher

docker version

Only Docker Desktop relevant, 4.35.0 and later

docker info

Only Docker Desktop relevant, 4.35.0 and later

Diagnostics ID

not relevant

Additional Info

No response

f2bo commented 3 weeks ago

I have the same issue. It seems to be a recurring problem.

https://github.com/docker/for-win/issues/14381 https://github.com/docker/for-win/issues/13574 https://github.com/docker/for-win/issues/13594

ktzsolt commented 3 weeks ago

Can confirm.

Workaround is to download the full installer from here: https://docs.docker.com/desktop/release-notes/

I installed with this on top of an existing DD installation (turned off/exited DD first) and asked if I want to replace my old version with the new version, clicked yes and the install basically did an upgrade, docker-desktop-data was not replaced so all the data, images, build cache, volumes etc are kept.

maffe commented 2 weeks ago

I deleted the Docker…exe found in %tmp%\DockerDesktopUpdates\, after that Docker Desktop downloaded the update again and the UAC prompt showed Docker as the publisher (update: this method initially did not work with the update from 4.35.1 to 4.36.0, but after a few days it did).

Previously it was suggested to run Get-bitstransfer –allusers | remove-bitstransfer (in elevated PowerShell) but Get-BitsTransfer -allusers did not show anything Docker related.