[FEATURE] Upgrade to using GPG Keys like everyone else.
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 6.1k
- Forks
- 2.2k
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 43
Description
docker login is a VERY complicated process just to keep our login info out of a clear text file. Even following the multi-step article to use a password manager results in an hour's worth of work or more to figure out why it can't find pass, and I still haven't figured out why it can't find it when I just installed and initialized it. (HINT: the following does NOT work.)
{
"auths": {},
"HttpHeaders": {
"User-Agent": "Docker-Client/18.09.7 (linux)"
},
"credsStore": "pass"
}
So, let's look at the usual way things work.
- GitHub authentication with
git?pubkeypasted into the GitHub interface. - GitLab authentication?
pubkeypasted into the GitLab interface. - Bitbucket authentication?
pubkeypasted into the Bitbucket interface. - Docker authentication? Cleartext username and password unless you install some obscure software, configure that obscure software with GPG, and then hope you get lucky and Docker can find the obscure software it relies on.
Do we see a problem? Please make your client work like git does and allow devs to simply paste their pubkey into their docker.com account. It's ALWAYS best to keep to what people know so they don't have to learn something new just to use your product.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the docker login entry point and the credential configuration shown in the issue, including the credsStore: pass setup. Done means defining and implementing a supported GPG/public-key authentication flow that avoids cleartext credentials without requiring the described password-manager configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker
- Domain
- authentication, cli
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100