From 8dcf1b893878b1c5eb004e0331bd724e98a97a22 Mon Sep 17 00:00:00 2001 From: Jonathan Boulle Date: Fri, 13 Feb 2015 09:36:26 -0800 Subject: [PATCH] fetch: require -insecure-skip-verify for Docker images Unfortunately since Docker images do not support signature verification, we can't enable it for them. To make things explicit, require users to provide the -insecure-skip-verify flag to work with Docker images. --- rkt/fetch.go | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/rkt/fetch.go b/rkt/fetch.go index f19daad..22fe637 100644 --- a/rkt/fetch.go +++ b/rkt/fetch.go @@ -114,9 +114,8 @@ func downloadImage(rem *cas.Remote, ds *cas.Store, ks *keystore.Keystore) (strin stdout("rkt: fetching image from %s", rem.ACIURL) if globalFlags.InsecureSkipVerify { stdout("rkt: warning: signature verification has been disabled") - } - if rem.Scheme == "docker" { - fmt.Printf("rkt: warning: signature verification for docker images is not supported\n") + } else if rem.Scheme == "docker" { + return "", fmt.Errorf("signature verification for docker images is not supported (try --insecure-skip-verify)") } err := ds.ReadIndex(rem) if err != nil && rem.BlobKey == "" {