eXo Jitsi Call Docker image

Image Signature

eXo Jitsi docker images are signed with cosign tool from Docker Hub.

In order to verify the signature of the eXo Jitsi docker image, please install the "cosign" command line tool. Then please follow these instructions:

1. Download the public key from https://www.exoplatform.com/security/container-signing and save it to cosign.pub file:

   -----BEGIN PUBLIC KEY-----
   MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEgYKR7SoWbXjHya1Bc2Ih3kX8wv8w
   Y7StaVsRXzbcIL0jECiKzKarPxQQ69uVmZ6c0JEVQhBeN9w3pr75D4o2/A==
   -----END PUBLIC KEY-----
   

2. Execute the following command:

   cosign verify --key cosign.pub exoplatform/jitsi:<tag>

   Example:

   cosign verify --key cosign.pub exoplatform/jitsi:7.2.1_0

   Output:

   [{"critical":{"identity":{"docker-reference":"index.docker.io/exoplatform/jitsi"},"image":{"docker-manifest-digest":"sha256:ae757647ebea57ded85bc8c5a3a1b131291bc53b6ee5de6c19aae86a822820fd"},"type":"cosign container image signature"},"optional":{"Bundle":{"SignedEntryTimestamp":"MEUCIHJm3s5x6voPUhV6kdz6PcFneu3CMhSB9+xkqU7jHpJnAiEAkcYgWYtyCwzAg0SsKkphAT5c1OjGAQKvfSkoWN5+K88=","Payload":{"body":"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","integratedTime":1785423063,"logIndex":2291370628,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}}}}]