π Signed images
Signed docker image digests are available in SHA256SUMS.asc
.
The images are signed by Nadav Ivgi (@shesek). The public key can be verified on the PGP WoT, github, twitter, keybase, hacker news and this video presentation.
# Verify signature wget https://raw.githubusercontent.com/ez-org/eznode/latest/SHA256SUMS.asc gpg --keyserver keyserver.ubuntu.com --recv-keys FCF19B67866562F08A43AAD681F6104CD0F150FC gpg --verify SHA256SUMS.asc # Get the signed hash for your platform grep amd64 SHA256SUMS.asc # Fetch docker image by hash and give it a local alias docker pull eznode/eznode@sha256:<hash> docker tag eznode/eznode@sha256:<hash> eznode # Run using the local alias docker run -it ... eznode ...