Does Nexus 3 support container image signing?

问题:

Does Nexus 3 private docker registry support container image signing? The RHEL documentation here suggests not, but I'd like confirmation.

回答1:

In the sense that Nexus supports the v2 Registry API, it should be able to handle signed images. I don't believe Nexus supplies a Notary service though which is where most of the signing operations occur and image/key information is stored. The Nexus docco mentions nothing about signing.

You can delegate trust for your Nexus repo to a local Notary service (github) as you would for any private repo. Nexus repo's have a habit of tripping over edge cases though.