pokusio / pokus-notary

A POC on using Notary to manage Content Trust
0 stars 0 forks source link

push trust data to private notary server (signing oci images and publish signature data / metadata ) #2

Open Jean-Baptiste-Lasselle opened 4 years ago

Jean-Baptiste-Lasselle commented 4 years ago
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443/ -d ~/.docker/trust list quay.io/pegasusio/ide-atom 
* fatal: unable to reach trust server at this time: 301.
jbl@pegasusio:~/notary$ docker login quay.io
Username: jean_baptiste_lasselle
Password: 
WARNING! Your password will be stored unencrypted in /home/jbl/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443/ -d ~/.docker/trust list quay.io/pegasusio/ide-atom 
* fatal: unable to reach trust server at this time: 301.
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-atom
* fatal: notary-server:4443 does not have trust data for quay.io/pegasusio/ide-atom
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm

* fatal: notary-server:4443 does not have trust data for quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ 
Jean-Baptiste-Lasselle commented 4 years ago

voilà c reussit

jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm

* fatal: notary-server:4443 does not have trust data for quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust init quay.io/pegasusio/ide-apm
You are about to create a new root signing key passphrase. This passphrase
will be used to protect the most sensitive key in your signing system. Please
choose a long, complex passphrase and be careful to keep the password and the
key file itself secure and backed up. It is highly recommended that you use a
password manager to generate the passphrase and keep it safe. There will be no
way to recover this key. You can find the key in your config directory.
Enter passphrase for new root key with ID 649d4a9: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new root key with ID 649d4a9: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new root key with ID 649d4a9: 
Repeat passphrase for new root key with ID 649d4a9: 
Enter passphrase for new targets key with ID bd84f14: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new targets key with ID bd84f14: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new targets key with ID bd84f14: 
Repeat passphrase for new targets key with ID bd84f14: 
Enter passphrase for new snapshot key with ID 9563903: 
Repeat passphrase for new snapshot key with ID 9563903: 
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm

* fatal: notary-server:4443 does not have trust data for quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust publish quay.io/pegasusio/ide-apm
Pushing changes to quay.io/pegasusio/ide-apm
Enter passphrase for targets key with ID bd84f14: 
Enter passphrase for snapshot key with ID 9563903: 
Successfully published changes for repository quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm
No targets present in this repository.

jbl@pegasusio:~/notary$ 

Todo : nettoyer le script, jusqu'à reproductibilité, puis ajout ds doc

Jean-Baptiste-Lasselle commented 4 years ago
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm

* fatal: notary-server:4443 does not have trust data for quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust init quay.io/pegasusio/ide-apm
You are about to create a new root signing key passphrase. This passphrase
will be used to protect the most sensitive key in your signing system. Please
choose a long, complex passphrase and be careful to keep the password and the
key file itself secure and backed up. It is highly recommended that you use a
password manager to generate the passphrase and keep it safe. There will be no
way to recover this key. You can find the key in your config directory.
Enter passphrase for new root key with ID 649d4a9: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new root key with ID 649d4a9: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new root key with ID 649d4a9: 
Repeat passphrase for new root key with ID 649d4a9: 
Enter passphrase for new targets key with ID bd84f14: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new targets key with ID bd84f14: 
Passphrase is too short. Please use a password manager to generate and store a good random passphrase.
Enter passphrase for new targets key with ID bd84f14: 
Repeat passphrase for new targets key with ID bd84f14: 
Enter passphrase for new snapshot key with ID 9563903: 
Repeat passphrase for new snapshot key with ID 9563903: 
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm

* fatal: notary-server:4443 does not have trust data for quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust publish quay.io/pegasusio/ide-apm
Pushing changes to quay.io/pegasusio/ide-apm
Enter passphrase for targets key with ID bd84f14: 
Enter passphrase for snapshot key with ID 9563903: 
Successfully published changes for repository quay.io/pegasusio/ide-apm
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-apm
No targets present in this repository.

jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust init quay.io/pegasusio/ide-atom
Root key found, using: 649d4a9b23c6fd50117bff966f79ce1d8ad398369127416692c146dce7ff1d40
Enter passphrase for root key with ID 649d4a9: 
Passphrase incorrect. Please retry.
Enter passphrase for root key with ID 649d4a9: 
Passphrase incorrect. Please retry.
Enter passphrase for root key with ID 649d4a9: 
Passphrase incorrect. Please retry.
Enter passphrase for root key with ID 649d4a9: 
Enter passphrase for new targets key with ID 4dc6dcb: 
Repeat passphrase for new targets key with ID 4dc6dcb: 
Enter passphrase for new snapshot key with ID 823bb74: 
Repeat passphrase for new snapshot key with ID 823bb74: 
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust publish quay.io/pegasusio/ide-atom
Pushing changes to quay.io/pegasusio/ide-atom
Enter passphrase for targets key with ID 4dc6dcb: 
Passphrase incorrect. Please retry.
Enter passphrase for targets key with ID 4dc6dcb: 
Enter passphrase for snapshot key with ID 823bb74: 
Successfully published changes for repository quay.io/pegasusio/ide-atom
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust list quay.io/pegasusio/ide-atom
No targets present in this repository.

jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust init docker.io/library/alpine
Root key found, using: 649d4a9b23c6fd50117bff966f79ce1d8ad398369127416692c146dce7ff1d40
Enter passphrase for root key with ID 649d4a9: 
Enter passphrase for new targets key with ID cf046ab: 
Repeat passphrase for new targets key with ID cf046ab: 
Enter passphrase for new snapshot key with ID 63b4783: 
Repeat passphrase for new snapshot key with ID 63b4783: 
jbl@pegasusio:~/notary$ notary -s https://notary-server:4443 -d ~/.docker/trust publish docker.io/library/alpine 
Pushing changes to docker.io/library/alpine

* fatal: valid signatures did not meet threshold for timestamp
jbl@pegasusio:~/notary$ 
Jean-Baptiste-Lasselle commented 4 years ago

Logs server / signer

jbl@pegasusio:~/notary$ docker-compose logs -f 
Attaching to notary_server_1, notary_signer_1, notary_mysql_1
mysql_1   | 2020-04-04 17:05:58+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 1:10.4.12+maria~bionic started.
mysql_1   | 2020-04-04 17:05:59+00:00 [Note] [Entrypoint]: Switching to dedicated user 'mysql'
mysql_1   | 2020-04-04 17:05:59+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 1:10.4.12+maria~bionic started.
mysql_1   | 2020-04-04 17:05:59 0 [Note] mysqld (mysqld 10.4.12-MariaDB-1:10.4.12+maria~bionic) starting as process 1 ...
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Using Linux native AIO
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Uses event mutexes
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Number of pools: 1
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Using SSE2 crc32 instructions
mysql_1   | 2020-04-04 17:05:59 0 [Note] mysqld: O_TMPFILE is not supported on /tmp (disabling future attempts)
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Initializing buffer pool, total size = 256M, instances = 1, chunk size = 128M
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Completed initialization of buffer pool
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: If the mysqld execution user is authorized, page cleaner thread priority can be changed. See the man page of setpriority().
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: 128 out of 128 rollback segments are active.
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Creating shared tablespace for temporary tables
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Setting file './ibtmp1' size to 12 MB. Physically writing the file full; Please wait ...
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: File './ibtmp1' size is now 12 MB.
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: 10.4.12 started; log sequence number 217899; transaction id 326
mysql_1   | 2020-04-04 17:05:59 0 [Note] InnoDB: Loading buffer pool(s) from /var/lib/mysql/ib_buffer_pool
mysql_1   | 2020-04-04 17:05:59 0 [Note] Plugin 'FEEDBACK' is disabled.
mysql_1   | 2020-04-04 17:05:59 0 [Note] Server socket created on IP: '::'.
mysql_1   | 2020-04-04 17:05:59 0 [Warning] 'proxies_priv' entry '@% root@5721735c3b6e' ignored in --skip-name-resolve mode.
mysql_1   | 2020-04-04 17:06:00 0 [Note] Reading of all Master_info entries succeeded
mysql_1   | 2020-04-04 17:06:00 0 [Note] Added new Master_info '' to hash table
mysql_1   | 2020-04-04 17:06:00 0 [Note] mysqld: ready for connections.
mysql_1   | Version: '10.4.12-MariaDB-1:10.4.12+maria~bionic'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  mariadb.org binary distribution
mysql_1   | 2020-04-04 17:06:00 0 [Note] InnoDB: Buffer pool(s) load completed at 200404 17:06:00
server_1  | no change
server_1  | notaryserver database migrated to latest version
server_1  | {"level":"info","msg":"Version: 0.6.1, Git commit: d2bf83b4, Go version: go1.14.1","time":"2020-04-04T17:06:01Z"}
server_1  | {"level":"info","msg":"Using remote signing service","time":"2020-04-04T17:06:01Z"}
server_1  | {"level":"info","msg":"Using mysql backend","time":"2020-04-04T17:06:01Z"}
server_1  | {"level":"info","msg":"Starting Server","time":"2020-04-04T17:06:01Z"}
server_1  | {"level":"info","msg":"Enabling TLS","time":"2020-04-04T17:06:01Z"}
server_1  | {"level":"info","msg":"Starting on :4443","time":"2020-04-04T17:06:01Z"}
server_1  | 2020/04/04 18:22:09 http: TLS handshake error from 192.168.1.15:36906: remote error: tls: unknown certificate authority
server_1  | {"go.version":"go1.14.1","http.request.host":"pegasusio.io:4443","http.request.id":"369ba70d-927f-4119-89c2-11dfbceedf5c","http.request.method":"GET","http.request.remoteaddr":"192.168.1.15:36912","http.request.uri":"/","http.request.useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: \u003cnil\u003e","time":"2020-04-04T18:22:14Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"pegasusio.io:4443","http.request.id":"369ba70d-927f-4119-89c2-11dfbceedf5c","http.request.method":"GET","http.request.remoteaddr":"192.168.1.15:36912","http.request.uri":"/","http.request.useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"691.752µs","http.response.status":404,"http.response.written":104,"level":"info","msg":"response completed","time":"2020-04-04T18:22:14Z"}
server_1  | 2020/04/04 18:33:33 http: TLS handshake error from 172.18.0.1:60764: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 18:42:08 http: TLS handshake error from 172.18.0.1:60782: remote error: tls: bad certificate
server_1  | 2020/04/04 19:07:58 http: TLS handshake error from 172.18.0.1:60802: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 19:14:21 http: TLS handshake error from 172.18.0.1:60814: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 19:27:22 http: TLS handshake error from 172.18.0.1:60818: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 19:27:38 http: TLS handshake error from 172.18.0.1:60822: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 19:28:49 http: TLS handshake error from 172.18.0.1:60826: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 19:34:18 http: TLS handshake error from 172.18.0.1:60830: remote error: tls: unknown certificate authority
server_1  | 2020/04/04 19:35:34 http: TLS handshake error from 172.18.0.1:60834: remote error: tls: unknown certificate authority
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"585732e0-1b17-4be2-a24a-6a8fb134ca41","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60838","http.request.uri":"/","http.request.useragent":"curl/7.52.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: \u003cnil\u003e","time":"2020-04-04T19:40:12Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"585732e0-1b17-4be2-a24a-6a8fb134ca41","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60838","http.request.uri":"/","http.request.useragent":"curl/7.52.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"147.729µs","http.response.status":404,"http.response.written":104,"level":"info","msg":"response completed","time":"2020-04-04T19:40:12Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"c21f201f-8267-4584-8b96-82c40835a28c","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60860","http.request.uri":"/","http.request.useragent":"curl/7.52.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: \u003cnil\u003e","time":"2020-04-04T20:02:26Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"c21f201f-8267-4584-8b96-82c40835a28c","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60860","http.request.uri":"/","http.request.useragent":"curl/7.52.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"157.03µs","http.response.status":404,"http.response.written":104,"level":"info","msg":"response completed","time":"2020-04-04T20:02:26Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"b472310e-4134-4e01-b16d-e58deaa1de86","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60864","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"64.101µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:03:13Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"4c18ec5d-06ad-4ccc-8370-40e06cc31ed6","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60872","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"56.438µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:03:25Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"0dfe6b07-6857-42e9-b5db-2c367c308119","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60880","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"43.725µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:04:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"cb069580-a100-4eec-b71b-4d36ff213200","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60888","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"53.696µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:06:15Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"cfa9e613-da64-44b5-b583-fbc5b61caef8","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60908","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"38.306µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:51:14Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"d53c1944-5bbc-4363-ab78-f63928d50769","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60916","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"52.62µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:51:27Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"5df023c6-2a9e-4091-8e02-bb167cf91e20","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60924","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"42.125µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:52:03Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"675a3289-70c9-401e-9e40-df86eaa4c9b2","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60932","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"40.311µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:55:41Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"c348ec64-b747-44db-84bb-078aa4ca212d","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60940","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"41.931µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:55:48Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"2211f15c-7519-4c5b-b59f-c0241505a691","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60954","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"36.63µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:57:10Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"50a1c8c1-d11f-4668-8e18-1ea096f27353","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60962","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"39.107µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T20:58:54Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e5f95c66-dfc4-416d-b620-864ffa6c0f02","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60966","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET root role","quay.io/pegasusio/ide-atom":"gun","time":"2020-04-04T20:58:54Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e5f95c66-dfc4-416d-b620-864ffa6c0f02","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60966","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T20:58:54Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e5f95c66-dfc4-416d-b620-864ffa6c0f02","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60966","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"1.382011ms","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T20:58:54Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"af2bd64c-8633-49d0-a4b6-8b73878696c3","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60970","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"105.345µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:00:24Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"0c58c309-897d-4f4d-ac56-24c745875578","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60974","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET root role","quay.io/pegasusio/ide-apm":"gun","time":"2020-04-04T21:00:24Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"0c58c309-897d-4f4d-ac56-24c745875578","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60974","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T21:00:24Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"0c58c309-897d-4f4d-ac56-24c745875578","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60974","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"958.719µs","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T21:00:24Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e308e018-5768-408c-b583-681932dc165b","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60978","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"45.601µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:34:56Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"b9a1935d-b977-432a-9ef3-557d91d5e96a","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60982","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/timestamp.key","http.request.useragent":"Go-http-client/1.1","level":"debug","msg":"200 GET timestamp key","quay.io/pegasusio/ide-apm":"gun","time":"2020-04-04T21:35:54Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"b9a1935d-b977-432a-9ef3-557d91d5e96a","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60982","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/timestamp.key","http.request.useragent":"Go-http-client/1.1","http.response.duration":"37.987002ms","http.response.status":200,"http.response.written":181,"level":"info","msg":"response completed","time":"2020-04-04T21:35:54Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"5a2857d9-54f6-4c4d-857c-13672923a96e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60986","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"44.676µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:36:01Z"}
server_1  | {"level":"debug","msg":"error retrieving timestamp: No record found","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e0c7cd4c-1c5c-48b7-9fdf-47ec554482f3","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60990","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/timestamp.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET timestamp role","quay.io/pegasusio/ide-apm":"gun","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e0c7cd4c-1c5c-48b7-9fdf-47ec554482f3","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60990","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/timestamp.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e0c7cd4c-1c5c-48b7-9fdf-47ec554482f3","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60990","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/timestamp.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"802.35µs","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"8c63d5e2-defb-4d30-9184-83c69d827ec5","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60994","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET root role","quay.io/pegasusio/ide-apm":"gun","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"8c63d5e2-defb-4d30-9184-83c69d827ec5","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60994","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"8c63d5e2-defb-4d30-9184-83c69d827ec5","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60994","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"808.769µs","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T21:36:01Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"4514f920-a729-44cc-8685-63d7a09a993e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:60998","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"43.542µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:36:23Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"f5e25b0e-7c9f-4c83-93af-94962032d67e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32770","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET root role","quay.io/pegasusio/ide-apm":"gun","time":"2020-04-04T21:36:23Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"f5e25b0e-7c9f-4c83-93af-94962032d67e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32770","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T21:36:23Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"f5e25b0e-7c9f-4c83-93af-94962032d67e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32770","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"982.956µs","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T21:36:23Z"}
server_1  | {"level":"debug","msg":"entered ValidateRoot with dns: quay.io/pegasusio/ide-apm","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"found the following root keys: [ecf4de8f60e774a747d9fed9259f7c2b945c7ce1a8f9439b690241276771d04f]","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"found 1 valid leaf certificates for quay.io/pegasusio/ide-apm: ecf4de8f60e774a747d9fed9259f7c2b945c7ce1a8f9439b690241276771d04f","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"found 1 leaf certs, of which 1 are valid leaf certs for quay.io/pegasusio/ide-apm","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"checking root against trust_pinning config for quay.io/pegasusio/ide-apm","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"checking trust-pinning for cert: ecf4de8f60e774a747d9fed9259f7c2b945c7ce1a8f9439b690241276771d04f","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":" role has key IDs: ecf4de8f60e774a747d9fed9259f7c2b945c7ce1a8f9439b690241276771d04f","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"verifying signature for key ID: ecf4de8f60e774a747d9fed9259f7c2b945c7ce1a8f9439b690241276771d04f","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"root validation succeeded for quay.io/pegasusio/ide-apm","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"Successfully validated root","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"targets role has key IDs: bd84f146836c9145e69165841a3d0a4df5da6b0e0dab83bffc4680a48e452752","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"verifying signature for key ID: bd84f146836c9145e69165841a3d0a4df5da6b0e0dab83bffc4680a48e452752","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"Successfully validated targets","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"snapshot role has key IDs: 95639038f806bb216ade1139c2f8c5a54fafd2d3a922c8f353a394dbb4001a38","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"verifying signature for key ID: 95639038f806bb216ade1139c2f8c5a54fafd2d3a922c8f353a394dbb4001a38","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"Successfully validated snapshot","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"SignTimestamp","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"sign called with 1/1 required keys","time":"2020-04-04T21:36:41Z"}
server_1  | {"level":"debug","msg":"sign called with 0/0 required keys","time":"2020-04-04T21:36:41Z"}
server_1  | {"go.version":"go1.14.1","http.request.contenttype":"multipart/form-data; boundary=7738d76b895d2f07c823d8a0e29ae7625a9f724d777801b19e34053678f1","http.request.host":"notary-server:4443","http.request.id":"2bd4bd81-ea1d-425f-8deb-e4e10d0eeba7","http.request.method":"POST","http.request.remoteaddr":"172.18.0.1:32774","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"updated quay.io/pegasusio/ide-apm to timestamp version 1, checksum 9cbc582d7c789d446105f5dc886b558f60e3c79f9b5c48095724daddf3e66c5b","quay.io/pegasusio/ide-apm":"gun","time":"2020-04-04T21:36:41Z"}
server_1  | {"go.version":"go1.14.1","http.request.contenttype":"multipart/form-data; boundary=7738d76b895d2f07c823d8a0e29ae7625a9f724d777801b19e34053678f1","http.request.host":"notary-server:4443","http.request.id":"2bd4bd81-ea1d-425f-8deb-e4e10d0eeba7","http.request.method":"POST","http.request.remoteaddr":"172.18.0.1:32774","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"44.883619ms","http.response.status":0,"http.response.written":0,"level":"info","msg":"response completed","time":"2020-04-04T21:36:41Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"6eb88b71-7cf0-4f54-8c26-e842e5c551e3","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32780","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"42.53µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:36:46Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"62d91336-3051-4b13-9487-50402b993435","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32784","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/timestamp.json","http.request.useragent":"Go-http-client/1.1","http.response.duration":"3.329486ms","http.response.status":200,"http.response.written":495,"level":"info","msg":"response completed","time":"2020-04-04T21:36:46Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"0c464ca8-6262-4262-a467-aae7eea89522","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32788","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/snapshot.6a88a4a195da421d94a27bc3fa3a22fd80dd6a287d04fef9827cc68104020116.json","http.request.useragent":"Go-http-client/1.1","http.response.duration":"56.342µs","http.response.status":200,"http.response.written":687,"level":"info","msg":"response completed","time":"2020-04-04T21:36:46Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"0e17dfb1-8661-4a18-9ef2-59fc1884c154","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32792","http.request.uri":"/v2/quay.io/pegasusio/ide-apm/_trust/tuf/targets.664b9efb97cb7659ee585ebeb4d66949b00550368355075782ea54d03c94a47d.json","http.request.useragent":"Go-http-client/1.1","http.response.duration":"898.199µs","http.response.status":200,"http.response.written":346,"level":"info","msg":"response completed","time":"2020-04-04T21:36:46Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"32d81fe9-077e-4039-960a-6311313dfb09","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32796","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"59.936µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:42:20Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e1f920df-7334-444d-b254-b79d6cae8b3e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32800","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/timestamp.key","http.request.useragent":"Go-http-client/1.1","level":"debug","msg":"200 GET timestamp key","quay.io/pegasusio/ide-atom":"gun","time":"2020-04-04T21:43:04Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"e1f920df-7334-444d-b254-b79d6cae8b3e","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32800","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/timestamp.key","http.request.useragent":"Go-http-client/1.1","http.response.duration":"31.804818ms","http.response.status":200,"http.response.written":181,"level":"info","msg":"response completed","time":"2020-04-04T21:43:04Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"bf35f329-16bf-447a-82a0-ca573db4350f","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32804","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"43.406µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:43:15Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"6ef6290e-008f-48a5-93dc-7e3dd5f3b3cb","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32808","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET root role","quay.io/pegasusio/ide-atom":"gun","time":"2020-04-04T21:43:15Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"6ef6290e-008f-48a5-93dc-7e3dd5f3b3cb","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32808","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T21:43:15Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"6ef6290e-008f-48a5-93dc-7e3dd5f3b3cb","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32808","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"1.018737ms","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T21:43:15Z"}
server_1  | {"level":"debug","msg":"entered ValidateRoot with dns: quay.io/pegasusio/ide-atom","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"found the following root keys: [f09b0572a78438dd9a3adccfc8bfc7d9520efb7adffbc2db0303fdcb06d733dd]","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"found 1 valid leaf certificates for quay.io/pegasusio/ide-atom: f09b0572a78438dd9a3adccfc8bfc7d9520efb7adffbc2db0303fdcb06d733dd","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"found 1 leaf certs, of which 1 are valid leaf certs for quay.io/pegasusio/ide-atom","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"checking root against trust_pinning config for quay.io/pegasusio/ide-atom","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"checking trust-pinning for cert: f09b0572a78438dd9a3adccfc8bfc7d9520efb7adffbc2db0303fdcb06d733dd","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":" role has key IDs: f09b0572a78438dd9a3adccfc8bfc7d9520efb7adffbc2db0303fdcb06d733dd","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"verifying signature for key ID: f09b0572a78438dd9a3adccfc8bfc7d9520efb7adffbc2db0303fdcb06d733dd","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"root validation succeeded for quay.io/pegasusio/ide-atom","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"Successfully validated root","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"targets role has key IDs: 4dc6dcba0ba3af65578950f1db1d0aefed6133a34d66e0c137259ce0919ab555","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"verifying signature for key ID: 4dc6dcba0ba3af65578950f1db1d0aefed6133a34d66e0c137259ce0919ab555","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"Successfully validated targets","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"snapshot role has key IDs: 823bb7408ea3a50165a44f4855ee00cf588177a7d57b9ede67deefe919ea2317","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"verifying signature for key ID: 823bb7408ea3a50165a44f4855ee00cf588177a7d57b9ede67deefe919ea2317","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"Successfully validated snapshot","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"SignTimestamp","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"sign called with 1/1 required keys","time":"2020-04-04T21:43:39Z"}
server_1  | {"level":"debug","msg":"sign called with 0/0 required keys","time":"2020-04-04T21:43:39Z"}
server_1  | {"go.version":"go1.14.1","http.request.contenttype":"multipart/form-data; boundary=6d83cdac2e9561c5f088aacca1a9e706f61143dfca9e42899250d6a11474","http.request.host":"notary-server:4443","http.request.id":"898d3a1e-c58e-4586-bfa2-e9a63274c5d1","http.request.method":"POST","http.request.remoteaddr":"172.18.0.1:32812","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"updated quay.io/pegasusio/ide-atom to timestamp version 1, checksum 3ba80a7208eabeb30e1a0fdf3bc76b9a14530fd8d065a5db79fe701a75fd7865","quay.io/pegasusio/ide-atom":"gun","time":"2020-04-04T21:43:39Z"}
server_1  | {"go.version":"go1.14.1","http.request.contenttype":"multipart/form-data; boundary=6d83cdac2e9561c5f088aacca1a9e706f61143dfca9e42899250d6a11474","http.request.host":"notary-server:4443","http.request.id":"898d3a1e-c58e-4586-bfa2-e9a63274c5d1","http.request.method":"POST","http.request.remoteaddr":"172.18.0.1:32812","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"60.622851ms","http.response.status":0,"http.response.written":0,"level":"info","msg":"response completed","time":"2020-04-04T21:43:39Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"57a69058-0598-43e4-b6ea-7c4902f93383","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32816","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"44.08µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:43:44Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"3d1d2a37-8847-45cf-acbb-d4d33c59f60d","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32820","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/timestamp.json","http.request.useragent":"Go-http-client/1.1","http.response.duration":"2.962402ms","http.response.status":200,"http.response.written":495,"level":"info","msg":"response completed","time":"2020-04-04T21:43:44Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"67a31d89-790a-4e2d-a336-e3dc30a09d09","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32824","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/snapshot.3405efc8c23bc82ff1b991b1fddbcbe8e96e7e19847dffa86a4ff6b224e8618f.json","http.request.useragent":"Go-http-client/1.1","http.response.duration":"202.478µs","http.response.status":200,"http.response.written":687,"level":"info","msg":"response completed","time":"2020-04-04T21:43:44Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"c3b0fc60-45d3-46b1-ba4e-663d290b8cf6","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32828","http.request.uri":"/v2/quay.io/pegasusio/ide-atom/_trust/tuf/targets.3a512af2d6968fa5154f543cbd6ce07a0cad27a71b21620bde3979cc454881ef.json","http.request.useragent":"Go-http-client/1.1","http.response.duration":"968.157µs","http.response.status":200,"http.response.written":346,"level":"info","msg":"response completed","time":"2020-04-04T21:43:44Z"}
signer_1  | no change
signer_1  | notarysigner database migrated to latest version
signer_1  | {"level":"info","msg":"Version: 0.6.1, Git commit: d2bf83b4, Go version: go1.14.1","time":"2020-04-04T17:06:00Z"}
signer_1  | {"level":"debug","msg":"Default Alias: timestamp_1","time":"2020-04-04T17:06:00Z"}
signer_1  | {"level":"debug","msg":"generated ECDSA key with keyID: ac6afd06d20c44dca2c6dcab6b6f73cdd201dcff22838f2ea84bde5446d032db","time":"2020-04-04T21:35:54Z"}
signer_1  | {"go.version":"go1.14.1","level":"info","msg":"CreateKey: Created KeyID ac6afd06d20c44dca2c6dcab6b6f73cdd201dcff22838f2ea84bde5446d032db","time":"2020-04-04T21:35:54Z"}
signer_1  | {"go.version":"go1.14.1","level":"debug","msg":"GetKeyInfo: Returning PublicKey for KeyID ac6afd06d20c44dca2c6dcab6b6f73cdd201dcff22838f2ea84bde5446d032db","time":"2020-04-04T21:36:41Z"}
signer_1  | {"go.version":"go1.14.1","level":"info","msg":"Sign: Signed {\"_type\":\"Timestamp\",\"expires\":\"2020-04-18T21:36:41.341872512Z\",\"meta\":{\"snapshot\":{\"hashes\":{\"sha256\":\"aoikoZXaQh2UonvD+joi/YDdaih9BP75gnzGgQQCARY=\",\"sha512\":\"dhLrW/qiPawK2S0Kr4e8VapeO59niWdvpiwOIhKrm4lbaUysWXkEmH0Uc+ZYYY9UvI39BqASOVnsFkluqJlCYw==\"},\"length\":687}},\"version\":1} with KeyID ac6afd06d20c44dca2c6dcab6b6f73cdd201dcff22838f2ea84bde5446d032db","time":"2020-04-04T21:36:41Z"}
signer_1  | {"level":"debug","msg":"generated ECDSA key with keyID: 04d4ddf40e63133edc75086fa7a10173b563bd77afff3e242380d3a6135a010a","time":"2020-04-04T21:43:04Z"}
signer_1  | {"go.version":"go1.14.1","level":"info","msg":"CreateKey: Created KeyID 04d4ddf40e63133edc75086fa7a10173b563bd77afff3e242380d3a6135a010a","time":"2020-04-04T21:43:04Z"}
signer_1  | {"go.version":"go1.14.1","level":"debug","msg":"GetKeyInfo: Returning PublicKey for KeyID 04d4ddf40e63133edc75086fa7a10173b563bd77afff3e242380d3a6135a010a","time":"2020-04-04T21:43:39Z"}
signer_1  | {"go.version":"go1.14.1","level":"info","msg":"Sign: Signed {\"_type\":\"Timestamp\",\"expires\":\"2020-04-18T21:43:39.450755746Z\",\"meta\":{\"snapshot\":{\"hashes\":{\"sha256\":\"NAXvyMI7yC/xuZGx/dvL6OlufhmEff+oak/2siToYY8=\",\"sha512\":\"VDKumNSlEpfmsYAdLCh/FN8KWM8Zi+37xPw136sPWaBz2EFNX9ee8BxiQPV/NTW7HbgT5M57wP46NOkNHUeqSA==\"},\"length\":687}},\"version\":1} with KeyID 04d4ddf40e63133edc75086fa7a10173b563bd77afff3e242380d3a6135a010a","time":"2020-04-04T21:43:39Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"721a6e88-a701-4e0d-99c2-a34a424ae9e0","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32832","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"73.775µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:46:02Z"}
signer_1  | {"level":"debug","msg":"generated ECDSA key with keyID: 7b5c3df3774654582bb2305bb95f99118c368b91fb12584b56552a7951ef686f","time":"2020-04-04T21:46:25Z"}
signer_1  | {"go.version":"go1.14.1","level":"info","msg":"CreateKey: Created KeyID 7b5c3df3774654582bb2305bb95f99118c368b91fb12584b56552a7951ef686f","time":"2020-04-04T21:46:25Z"}
server_1  | {"docker.io/library/alpine":"gun","go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"5ddbaa44-e8a1-4556-b2dd-8a8de2898694","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32836","http.request.uri":"/v2/docker.io/library/alpine/_trust/tuf/timestamp.key","http.request.useragent":"Go-http-client/1.1","level":"debug","msg":"200 GET timestamp key","time":"2020-04-04T21:46:25Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"5ddbaa44-e8a1-4556-b2dd-8a8de2898694","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32836","http.request.uri":"/v2/docker.io/library/alpine/_trust/tuf/timestamp.key","http.request.useragent":"Go-http-client/1.1","http.response.duration":"37.224596ms","http.response.status":200,"http.response.written":181,"level":"info","msg":"response completed","time":"2020-04-04T21:46:25Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"09adeefa-a7fe-4207-a25f-17c49b5c502b","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32840","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"77.013µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2020-04-04T21:46:40Z"}
server_1  | {"docker.io/library/alpine":"gun","go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"f0cd9a1c-8d4c-4c67-9eaf-dc0db842f36a","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32844","http.request.uri":"/v2/docker.io/library/alpine/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"404 GET root role","time":"2020-04-04T21:46:40Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"f0cd9a1c-8d4c-4c67-9eaf-dc0db842f36a","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32844","http.request.uri":"/v2/docker.io/library/alpine/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","level":"info","msg":"metadata not found: You have requested metadata that does not exist.: No record found","time":"2020-04-04T21:46:40Z"}
server_1  | {"go.version":"go1.14.1","http.request.host":"notary-server:4443","http.request.id":"f0cd9a1c-8d4c-4c67-9eaf-dc0db842f36a","http.request.method":"GET","http.request.remoteaddr":"172.18.0.1:32844","http.request.uri":"/v2/docker.io/library/alpine/_trust/tuf/root.json","http.request.useragent":"Go-http-client/1.1","http.response.contenttype":"application/json; charset=utf-8","http.response.duration":"874.63µs","http.response.status":404,"http.response.written":116,"level":"info","msg":"response completed","time":"2020-04-04T21:46:40Z"}
Jean-Baptiste-Lasselle commented 4 years ago

https://github.com/theupdateframework/notary/blob/master/docs/command_reference.md

Jean-Baptiste-Lasselle commented 4 years ago

https://github.com/theupdateframework/notary/blob/master/docs/reference/client-config.md

Jean-Baptiste-Lasselle commented 4 years ago

https://github.com/theupdateframework/notary/tree/master/docs