Unable to verify UBI GPG signatures when the images are pulled from a local registry
Issue
- How to verify that RH container images are genuinely coming from Red Hat when received via an local container registry ? (Artifactory, Nexus, Quay)
- When pulling down a container image, the error message
None of the signatures were accepted, reasons: Signature for identity registry.redhat.io/XXX/XXX:XXX is not accepted.
is displayed.
Environment
- Red Hat Enterprise Linux (RHEL) 8.2
- podman 1.9.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.