singularity-sign - Add digital signature(s) to an image
singularity sign [sign options...]
The sign command
allows a user to add one or more digital signatures to a SIF
image. By default, one digital signature is added for each
object group in
the file.
Key material can
be provided via PEM-encoded file, or an entity in the PGP
keyring. To manage the PGP keyring, see ’singularity
help key’.
--cosign mode
supports signing an OCI image within an OCI-SIF file with a
cosign-compatible signature. A private key must be provided
with the --key
flag.
|
-c, --cosign[=false] |
sign an OCI-SIF with a cosign-compatible sigstore signature | ||
|
-g, --group-id=0 |
sign objects with the specified group ID | ||
|
-h, --help[=false] |
help for sign | ||
|
--key="" |
path to the private key file | ||
|
-k, --keyidx=0 |
PGP private key to use (index from ’key list --secret’) | ||
|
-i, --sif-id=0 |
sign object with the specified ID |
Sign with a
private key:
$ singularity sign --key private.pem container.sif
Sign with PGP:
$ singularity sign container.sif
Sign an image
within an OCI-SIF with a cosign compatible signature:
$ singularity sign --cosign --key cosign.key
container.oci.sif
singularity(1)
15-May-2026 Auto generated by spf13/cobra