Configuring the Container Image Trustlist

Procedure

  1. Check the SHA256 value of the created container image.
    • For a container image that has been loaded to the Atlas 200 AI accelerator module (RC), Atlas 500 Pro AI edge server (model 3000) or Atlas 500 AI edge station (model 3000), log in to the device background as the root user and run the following command to check the SHA256 value of the image:
      docker images --no-trunc REPOSITORY:TAG     # Check the SHA256 value of a specified container image.
      Table 1 Parameter Description

      Parameter

      Description

      REPOSITORY

      Specifies the name of the Docker image. You can run the docker images command to view the names of all loaded images.

      TAG

      Specifies the tag name of the Docker image. You can run the docker images command to view the tags of all loaded images.

      After the docker images --no-trunc REPOSITORY:TAG command is executed, the following information is displayed:

      REPOSITORY              TAG      IMAGE ID                                                                   CREATED       SIZE
      docker-image-sample    2.0.4    sha256:3f70ffea465e285e55061dc14dbab18be158b948b3332732e132640f242be67c    2 days ago    229MB

      The value of IMAGE ID is the SHA256 value of the container image.

    • For a container image that has been compressed into a package, you can use a decompression tool to view its SHA256 value that is presented as the file name of sha256.json in the package.

      Example: For the 3f70ffea465e285e55061dc14dbab18be158b948b3332732e132640f242be67c.json file, 3f70ffea465e285e55061dc14dbab18be158b948b3332732e132640f242be67c is the SHA256 value of the container image.

  2. Add the SHA256 value of the container image to the imageSha256 trustlist.

    You can use the built-in modify_pod_config_json.py script of the AtlasEdge to configure container security options and use --imageSha256WihteList to add the SHA256 value of the image to the image SHA256 trustlist.

  3. Restart the software. For details, see Restarting the AtlasEdge Software.