signing_and_provenance.md

Definitions

1. Image – immutable detached content that is means for instantiating a container
2. registry – an endpoint that can serve information named images, within a namespace.
3. image namespace – the owner scope of an image
4. namespace identity – cryptographically safe identity or fingerprint for an image namespace

Requirements

• definition of a registry as an endpoint for identity of a requested image’s namespace
• detached validating of the identity of an image’s namespace
• sane default registry of the docker hub
• configurable priority of registries (to solve conflict in image namespace)