docker: allow unsigned images

timbretimber · timbretimber · commit b1e022265ce3 · 2025-11-02T23:00:21.000-07:00
* trust is using gpg keys, not really in common use outside of redhat repos https://docs.podman.io/en/latest/markdown/podman-image-trust.1.html Signed-off-by: Allen Davis <hoplin44@proton.me>
diff --git a/sources/docker.go b/sources/docker.go
@@ -71,9 +71,8 @@ func (s *docker) Run() error {
 	systemCtx := &types.SystemContext{
 		DockerInsecureSkipTLSVerify: types.OptionalBoolFalse,
 	}
-	policy, err := signature.DefaultPolicy(systemCtx)
-	if err != nil {
-		return fmt.Errorf("Failed to create policy: %w", err)
+	policy := &signature.Policy{
+		Default: []signature.PolicyRequirement{signature.NewPRInsecureAcceptAnything()},
 	}
 	policyCtx, err := signature.NewPolicyContext(policy)
 	if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -71,9 +71,8 @@ func (s *docker) Run() error {`
`71`	`71`	`systemCtx := &types.SystemContext{`
`72`	`72`	`DockerInsecureSkipTLSVerify: types.OptionalBoolFalse,`
`73`	`73`	`}`
`74`		`- policy, err := signature.DefaultPolicy(systemCtx)`
`75`		`- if err != nil {`
`76`		`- return fmt.Errorf("Failed to create policy: %w", err)`
	`74`	`+ policy := &signature.Policy{`
	`75`	`+ Default: []signature.PolicyRequirement{signature.NewPRInsecureAcceptAnything()},`
`77`	`76`	`}`
`78`	`77`	`policyCtx, err := signature.NewPolicyContext(policy)`
`79`	`78`	`if err != nil {`