Kelsey Hightower bad73895c9 fetch: add signature validation ...

Currently rocket does not perform signature validation for ACI images.

Fix the issue by validating all ACI images during the initial download.

Example Usage:

```
$ sudo rkt run example.com/hello:0.0.1
rkt: starting to discover app img example.com/hello:0.0.1
...
rkt: example.com/hello:0.0.1 verified signed by:
  Kelsey Hightower (ACI signing key) <kelsey.hightower@coreos.com>
```

This patch introduces a new global flag `-insecure-skip-verify`, which
disables signature validation for a single run.

```
$ sudo rkt -insecure-skip-verify run example.com/hello:0.0.1
...
```

This patch changes the behaviour of the fetch and run subcommands. By
default rocket will attempt to verify all ACI images and fail if the
detached signature is missing.

This patch also includes a new tutorial on how to sign, host, and verify
ACI images.

2015-01-12 23:40:33 -08:00

..

keystoretest

fetch: add signature validation

2015-01-12 23:40:33 -08:00

keystore_test.go

fetch: add signature validation

2015-01-12 23:40:33 -08:00

keystore.go

fetch: add signature validation

2015-01-12 23:40:33 -08:00