ocicrypt
ocicrypt copied to clipboard
Encryption libraries for Encrypted OCI Container images
The dependency got archived and is unmaintained since February: https://github.com/mozilla-services/pkcs7 We need to find a replacement or maintain the `pkcs7` package here on our own.
not an issue but thought i'd add it here incase anyone is interested. a bit ago if fiddled with ocicrypt key providers and came up with basic (alpha quality, charitably)...
run ocicrypt keyprovider outside of container (or at least as the running user) on encrypt/decrypt
Hello! When using ocicrypt, I believe at least, the key provider is executed inside of the container as root so $USER is root. Is there a way to disable this...
Would it be possible to give the key provider the option to specify the encryption key and protocols instead of just the KEK?
Heyyo! I've got a curious question, I'm working on scenarios where I'd like to use the public half of an RSA key to encrypt content with skopeo as the runner...