Unable to verify UBI GPG signatures when the images are pulled from a local registry

Solution Verified - Updated -

Issue

  • How to verify that RH container images are genuinely coming from Red Hat when received via an local container registry ? (Artifactory, Nexus, Quay)
  • When pulling down a container image, the error message None of the signatures were accepted, reasons: Signature for identity registry.redhat.io/XXX/XXX:XXX is not accepted. is displayed.

Environment

  • Red Hat Enterprise Linux (RHEL) 8.2
  • podman 1.9.2

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In