►
From YouTube: Notary: State of the Container Supply Chain - Justin Cormack, Docker & Steve Lasker, Microsoft
Description
Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Notary: State of the Container Supply Chain - Justin Cormack, Docker & Steve Lasker, Microsoft
As supply chain security becomes a larger concern for all types of organization, the tooling for supply chain security becomes critical. The Notary v2 project was set up to address issues with the original v1 project that did not see widespread use, and to gather consensus on the types of security mechanisms that were needed. This talk will show the progress we have made, and go through the decisions we made so far, as we are going into early production use. We will look at the future roadmap and the supply chain landscape.
A
All
right,
so,
when
justin
and
I
titled
this
talk,
it
was
early
in
the
year
that
was
just
like
hey
there's
some
people
working
on
some
stuff
and
it's
kind
of
important.
We
should
really
keep
on
going
my
how
things
have
changed
this
year,
so
it's
really
exciting
actually
to
see
all
the
focus.
I'm
steve
lasker,
I'm
a
pm
architect
in
azure.
I
focus
on
our
container
registries,
acr
mcr
and
a
lot
of
the
content
that
flows
through
there
for
various
other
services
that
we
provide.
A
Justin
couldn't
make
it
today
because
of
the
travel
restrictions.
So
we've
been
giving
this
talk
a
couple
times
now,
so
it's
unfortunate,
he
couldn't
make
it
but
we'll
get
started
so
yeah.
I,
when
I
got
this
email
a
couple
months
before
this
came
out
of
hey,
there's
this
executive
order
coming
out,
I'm
like
who
at
micros,
which
executive
at
microsoft's
putting
something
out
like
okay.
This
will
be
interesting
and
I
was
reading
the
email
more
and
it
started
talking
about
things
like
in
a
government
way
and
yeah.
A
You
scan
email
to
see
if
you're
going
to
pay
attention
to
this
thing
or
not.
I
was
like
government
like
didn't.
We
do
all
this
congress
stuff
where
they
were
interviewing
tech.
Companies
like
this
is
not
going
to
go
well
and
sure
enough.
It
was,
you
know,
a
real
thing
and
there's
a
lot
of
stuff.
That's
been
happening
over
the
last
several
years,
but
you
know
the
past
couple
years
has
been
ramping
up,
so
it
was
great
to
see
it.
So
there
is
over
the
last
several
months.
A
A
A
We
just
don't
think
about
it,
because
it's
just
part
of
the
ecosystem
that
we
work
with
and
that's
what
I'm
hoping
we'll
see
with
the
supply
chain,
because
the
historical
problems
with
trying
to
do
secure
supply
chain
is
just
too
hard.
So
I
can't
do
things
it's
too
hard
when
I'm
being
asked
to
do
too
much.
A
A
A
So
when
I
think
of
the
stages
of
the
supply
chain,
I
kind
of
think
of
it
as
the
cdc,
which
obviously
has
a
search
problem.
So
but
it's
the
way,
I
think
about
it.
There's
the
creation
of
those
binaries,
the
creation
of
images
packages,
all
of
those
pieces
that
go
into
it
the
source
code,
whatever
it
is,
that
goes
into
the
creation,
and
then
I
want
to
distribute
it
to
the
various
places
that's
going
to
get
consumed.
A
Now
I
like
making
analogies
back
to
real
world
other
world
problems
and,
if
I
think
of
how
products
are
created,
distributed
and
consumed,
I
can
go
get
a
kohler
faucet
from
home
depot
lowe's
and
a
hardware
store
right.
It's
distributed,
multiple
hops
food
is
distributed,
multiple
places,
that's
how
it
gets
spread
out
and
that's
how
we
have
reliable
scalable
solutions.
A
So
that's
the
distribution
and
then,
when
I'm
consuming
it,
I
want
to
know
that
this
is
the
kohler
faucet.
This
is
the
rolex
watch
right.
I
want
to
know
that
this
image
is
from
somebody
that
I
trust
so
notary
v2
is
focused
on
the
distribution
and
consumption.
That's
the
prime
area,
we're
not
worried
about
how
the
source
code
was
built
and
so
forth.
That's
not
a
focus
that
we're
doing,
but
when
you
create
content,
your
from
statement
is
the
consumption
of
distribution
from
somewhere
else.
A
So
there's
a
little
bit
there
and
we
want
to
make
sure
that
when
you're
consuming
something
that
you
know
what
you're
consuming
is
what
you
intended
to
be.
So
there
is
a
bit
of
that,
but
that's
where
notary
v2
focuses
on
and
with
v1.
We
don't
really
talk
much
about
v1
here,
it's
more
about
I'll.
Just
stay
focused
on
v2
of
the
main
thing
is
the
signatures
can
flow
with
the
content.
A
So
how
do
you
deploy
today
is
an
interesting
model?
Do
you
deploy
by
unique
tags?
All
right
tags
are
nice
because
they're
human-readable,
I
can
see
it.
I
can
remember
it.
I
could
write
it
down.
I
can
track
it
part
of
the
problem
with
tags.
They're,
not
immutable,
they're
they're,
not
you
can't
lock
a
tag
as
a
standard
across
all
registries.
A
That's
a
registry,
specific
implementation!
Do
you
deploy
on
digests
they're,
unique,
that's
great
they're,
really
long
when
they're
256.
Imagine
when
they
go
to
five
five,
twelve,
five,
thirteen,
whatever
you
know,
there's
a
balance
there
of
usability
that
needs
to
be
incorporated.
Do
you
convert
a
tag
to
a
digest?
A
A
A
A
A
A
A
A
Now
I
mentioned
I
like
real
world
analogies,
so
I
wanted
to
use
this
as
an
example
to
try
to
to
bounce
back
a
little
bit
most
of
you
came
here.
Did
you
travel
by
a
plane
right,
okay,
there's,
probably
some
people
from
here
from
l.a
and
the
people
at
home.
You
know
I'm
sure
at
some
point,
you've
been
on
a
plane
and
you'd
like
to
get
one
and
get
out
and
get
more
so
you
get
to
the
airport
and
agent
99
says
whoa
whoa
you're
not
going
anywhere
just
yet
give
me
your
pod
spec.
A
Where
are
you
going
okay
here
here?
It
is
and
agent
99
says.
Well,
like
that's
great
okay,
you
want
to
get
on
that
plane
and
go
to
that
destination.
But
who
are
you
well
hi?
My
name
is
steve
lasker
here,
that's
great,
but
who's
telling
me
that.
How
do
I
know?
That's
really
you
is
it
a
note
from
my
parents?
A
Is
it
something
I
just
copied
or
is
it
some
kind
of
document
that
can
be
verified
so
driver's
licenses
from
various
states?
There's
always
this
interesting
extra
check
that
they're
trying
to
do
now
for
some
states
or
all
states?
Not
all
states
have
finished
them
yet
or
passports
from
certain
countries
are
allowed.
Certain
countries
are
not
allowed
right.
A
A
Now
I
don't
have
to
have
a
printed
paper.
I
could
give
my
digital
version
of
that
as
well
on
my
phone
or
whatever,
and
once
agent9
has
said,
yep
you're
good
I've
checked,
I
you
know
you
are
who
you
are
because
remember
you're
still
outside
they
can
stamp
my
boarding
pass
physically
or
digitally
that
says:
hey,
I'm
now
allowing
you
into
the
staging
area.
A
So
and
as
I
go
through
the
staging
area,
what
happens
there?
You
get
scammed,
it's
kind
of
interesting
right,
even
though
you've
proved
in
your
your
identity,
you've,
given
it
a
pod
spec
of
where
you
want
to
be
you're,
still
going
to
get
scanned
and
verified
that
nope,
that's
still
good
you're
good
to
go,
but
you
get
to
the
gate.
A
A
I
don't
give
him
my
driver's
license
again.
I
don't
give
him
my
passport.
That
was
a
pre-check
that
was
done
just
to
get
into
the
staging
area.
Now
agent
44
he's
checking.
Do
I
have
a
signature
for
being
in
that
environment
and
that's
the
check,
that's
being
done
so
there's
a
bit
of
a
promotion
scenario
happening.
A
So
let's
take
a
look
at
maybe
something
we're
doing
with
our
code
as
opposed
to
our
travels.
So
we
have
our
proverbial
customer.
We
think
about
a
notary
with
this
acme
rockets,
company
and
they're,
trying
to
deploy
some
software
from
wabit
networks,
and
so
they
pull
an
image.
But
we've
got
some
policy
management.
This
is
good
right.
We've
got
opa
gatekeeper,
saying
no,
no,
no
you're,
not
going
yet.
A
Okay,
how
many
of
you
have
environments
where
there
is
a
virtual
network
in
configured
and
you're
not
allowed
to
have
egress
to
the
public
internet
and
for
the
ones
that
are
not
raising
your
hands?
Is
some
security
person
yelling
at
you?
You
should
be
doing
it
and
you
keep
on
giving
me
excuses
and
they're
too
busy
and
they
leave
you
alone
for
a
while.
But
it's
not
going
to
last
right.
A
It's
this
is
that
everyone's
trying
to
shut
these
down
there's
been
technical
issues,
we're
all
as
cloud
providers
and
products,
and
you
know,
projects
we're
all
trying
to
enable
those
v-net
scenarios.
So
now
that
s-bomb
that's
sitting
over
there
in
wabit
networks
that
can't
get
in
the
image
couldn't
get
in
at
this
point
either.
But
you
know
the
scan
results,
the
source,
whatever
it
is,
all
that
stuff
is
blocked.
You
can't
get
to
it.
A
A
A
So
now,
how
do
I
get
that
content
in
and
do
I
verify
it
now
by
the
way
the
content
isn't
coming
from
just
one
place
right,
there's
docker
hub
is
a
distributor,
a
redistributor
of
content.
Just
like
you
go
to
home
depot
and
lowe's.
There's
lots
of
vendors
that
are
there,
but
there's
other
registries
out
there
right
microsoft,
we
ship
our
software
directly
oracle,
nvidia,
ibm
well
ibm
different
story,
but
anyway,
sorry.
I
was
remembering
something
else,
but
there's
software
vendors
that
do
direct
shipment.
A
So
the
signed
content
that
wabit
networks
produces
with
the
signatures
on
all
of
that
will
go
to
docker
hub
and
docker
hub
will
stamp
another
signature
on
it.
If
they
certify
that
content,
there's
some
checks
that
they're
doing
whatever
that
is
just
like.
If
you
go
to
home
depot,
and
you
see
some
products
there,
you
probably
trust
it's
good
product
right,
there's
a
brand
there
that
you
trust
they're
doing
some
vetting
now
the
other
content
in
the
docker
hub
example.
It
could
be
more
like
an
ebay
example.
A
So
the
way
you
can
do
this
is
you
can
pull
this
content
in
so
now
you're
bringing
that
content
in
and
now
you
can
stamp
it
with
a
signature
for
that
acme
rockets
has
done
the
scanning
the
policy
management,
whatever
they
decide
that
they're
the
agent
99
there.
That
says,
I
trust
these
sources
and
once
it's
in,
I
will
put
it
in
the
shared
registry,
and
I
can
put
another
signature
on
it
and
as
part
of
that
import
process,
you
can
set
up
a
trust
policy.
A
A
Sorry,
but
then
inside
of
each
environment,
you
might
have
a
different
trust
policy.
The
trust
policy
in
that
top
right,
one
might
say.
As
long
as
it's
got
the
acme
rocket
shared,
you
know,
signature
on
it's
good,
the
other
ones
might
be
a
more
critical
environment
and
they
have
a
more
critical
set
of
bars.
There
might
be
some
acme
rockets,
critical
content
that
has
a
higher
bar
and
what
what's
allowed
in
there.
A
A
A
All
that
is
difficult.
You
can
get
around
it.
You
can't
get
around
the
fact
that
the
signature
wouldn't
move
with
the
content.
That
was
the
critical
blocking
thing
at
the
end
of
the
day.
That
was
like
you
know
the
head
decapitator,
so
we
want
to
make
sure
that
we
can
support
artifacts
promoted
across
environments
they're
in
v-nets.
How
do
we
deal
with
that?
How
do
we
do
validation
and
because
they're
getting
in
that
v-net,
it
can't
go
back
out
to
get
the
s-bomb
to
get
the
signature
to
get
these
other
things?
A
A
It
took
us
a
couple
of
months
to
realize
we
can't
change
the
digest
and
we
can't
change
the
tag
that
would
mess
up
all
your
cube,
deploy
scripts.
All
your
helm,
charts
all
your
pod
specs
like
it
needs
to
be
transparent
to
all
the
workflows.
You
have
now
use
the
digest,
use
the
tag,
and
now,
let's
go
find
the
signature.
Now
let's
go
find
the
s-bomb,
so
these
things
become
detached
objects
that
get
added
to
it.
A
I
had
to
hand
my
information
through
the
little
plastic
hole
they
scanned
it
and
only
if
I
was
approved
was
I
allowed
in
if
I
walked
in
with
the
id
it's
the
trojan
horse
attack,
I'm
already
in
right.
That's
exactly
we're
trying
to
avoid
with
these
detachable
objects,
and
we
talked
about
multiple
signatures
and
so
forth.
A
A
So
the
first
thing
I'm
going
to
do
is
just
generate
a
certificate
for
wabit
networks.
This
is
a
key
pair
for
my
public
and
private
keys,
their
x
509
keys.
I
can
use
the
key
management
systems
that
you're
using
today
that'll
have
a
full
extensibility,
so
you
can
use
whatever
cloud
provider
key
vault
or
your
on-prem
key
vault
or
a
hashicorp
or
whatever
project
you
want.
A
And
now
I'll
do
just
whoops
I'll
paste
it
here
I'll.
Do
a
docker
build
docker
push
of
that
public
image
right,
I'm
building
the
wabbit
network's
net
monitor
image,
and
now
the
notary,
v2
client
is
notation
and
I'm
just
going
to
say,
notation
sign
that
public
image
now
the
config
that
I've
set
up
has
that
key
already
in
it.
If
we
look
closely
up
here
when
I
said
generate
cert
there
is
I
added
dash
default,
so
I
can
configure
that
information.
We'll
talk.
We
talked
a
little
bit
more
about
policy.
A
A
A
So
I've
got
the
net
monitor
image
at
the
top
here
and
what
I've
done
is
said,
I'm
going
to
add
a
signature,
that's
of
a
notary
v2,
that's
the
that's
the
the
artifact
type
and
then
that's
the
digest
of
that
signature.
But
you
can
see
it's
linked
now,
let's
go
and
make
an
s-bomb
and
we'll
push
the
s-bomb.
A
A
A
A
A
A
Now
think
about
what
we've
done
here
really
this:
this
could
be
the
snick
client
right,
I'm
showing
a
little
bit
more
details
there.
That
could
be
snick
scan
and
here's
the
reference
and
then
it
would
internally
to
that
cli
would
say:
okay,
I'm
going
to
scan
it,
I'm
going
to
push
it
and
I'm
going
to
sign
it.
So
the
fact
that
I
used
three
commands
is
just
showing
you
some
of
the
the
details
there
and
now,
when
I
look
at
it
again,.
A
A
A
You
know
your
media
player
and
do
you
use
all
those
individual
tools
to
copy
the
content
from
one
file
to
it
from
folder
to
another,
of
course,
not
there's
a
file
system,
api
and
the
file
system.
Api
knows
how
to
think
about
files
that
are
in
a
directory
and
it
can
copy
it.
The
file
system
api
doesn't
care
what
the
content
is.
A
A
It
has
attributes
when
you
look
at
explorer
or
you
do
an
ls
by
default,
you
don't
see
all
of
the
attributes
and
all
the
noise.
You
just
see
the
list
of
files,
because
that's
all
you
care
about
even
by
default,
the
extension
isn't
there,
but
you
get
an
icon
right.
The
point
is,
those
are
details
that
you're
not
thinking
about.
A
So
what
we
wanted
to
do
is
we
really
needed
to
incorporate
that
as
a
first
class
object?
We
didn't
want
the
signatures
and
the
helm
charts.
It's
not
the
contrast,
sorry,
the
signatures
and
the
scanner
results
and
all
those
things
to
be
populating
that
list.
When
I
do
the
repo
listing,
because
I
want
to
see
all
the
builds,
that's
what
I'm
trying
to
see,
I'm
trying
to
see
v1
v2
v3
before
all
of
those
tags
of
all
the
content
that
I'm
actually
thinking
about.
A
A
A
A
A
Configure
what
certs
are
trusted?
What
public
keys
are
trusted
now,
I'm
using
my
key
management
system,
so
I
got
the
key
on
my
machine
right.
That's
part
of
what
we're
trying
to
do
is
leverage
the
existing
infrastructure,
but
I'm
configuring
the
policy
to
say
I'm
allowing
that
web
network
signature
to
come
in
so
now,
when
I
do
verify
now,
it
does
pass.
A
A
A
A
A
A
A
A
And
I
talked
about
the
key
provider:
extensibility
we'll
have
key,
revocation
absolutely
key
and
signature
revocation
right
when
you
scan
your
driver's
license
your
passport,
we
need
to
know
which
of
the
bad
entities
and
don't
move
forward.
It
turns
out
the
feedback.
We've
gotten
you
know
and
tell
us
differently-
is
that's
really
important
for
the
public
content
internally,
there
are
other
systems
that
are
already
managing
what
gets
deployed.
A
It
actually
gets
more
complicated
internally
to
try
to
do,
revocation,
not
just
because
the
implementation,
it's
the
management
of
it,
we're
we're
working
with
the
tough
team
they're
we're
definitely
trying
to
get
tough
integrator
into
this.
The
interesting
thing
about
tough
and
a
lot
of
the
the
update
framework
is
how
it's
been
used.
It's
for
single
streaming
kind
of
registries,
the
single
docker
hub
registry,
a
single
car
stream
that
goes
to
car
devices,
a
single
update
to
is
it
nest
devices
or
something
that
there's
one
registry.
There's
no
content.
A
We
also
have
an
oci
registry,
one
fallback
mechanism
as
well,
because
we
know
that
this
is
using
work
that
we've
done
in
auras
to
enhance
registries
to
know
about
these
reference
types
we'll
have
that
in
acr
we'll
have.
I
don't
want
to
speak
for
other
cloud
providers
and
when
they're
doing
the
work,
we're
working
with
the
other
ones
and
docker
the,
but
we
know
it
would
take
a
while
for
everybody
to
get
there.
So
we
will
have
some
fallback
support,
but
it's
hard
to
know
what
you're
falling
back
to.
A
If
you
don't
know
what
you're
falling
back
from
so
we
released
the
draft
spec
couple
weeks
ago,
we're
feeling
pretty
good
we're
looking
at
it.
You
can't
really
do
multiple
signatures
with
some
of
the
tag
schemes
that
have
been
been
thinking
about,
so
we're
trying
to
figure
out.
What's
the
best
model
there,
so
just
wrapping
up
the
signature
allows
you
to
decouple
location
from
identity.
A
A
A
We've
got
a
couple
of
projects
here.
This
has
generated
a
couple
of
projects
so
that
we
can
use
these
things
not
just
for
notary
but
for
other
signatures
or
other
supply
chain
artifacts
or
if
you
want
to
associate
the
pictures
of
this
conference
for
the
image
or
whatever
all
that's
there,
and
I
will
stop
talking
and
stop
presenting
and
take
any
questions
in
the
30
seconds.
I
have
left.