{"action":"created","issue":{"url":"https://api.github.com/repos/coreos/rocket/issues/481","labels_url":"https://api.github.com/repos/coreos/rocket/issues/481/labels{/name}","comments_url":"https://api.github.com/repos/coreos/rocket/issues/481/comments","events_url":"https://api.github.com/repos/coreos/rocket/issues/481/events","html_url":"https://github.com/coreos/rocket/issues/481","id":56760828,"number":481,"title":"rkt fetch: improve UX when encountering untrusted signature","user":{"login":"robszumski","id":755540,"avatar_url":"https://avatars.githubusercontent.com/u/755540?v=3","gravatar_id":"","url":"https://api.github.com/users/robszumski","html_url":"https://github.com/robszumski","followers_url":"https://api.github.com/users/robszumski/followers","following_url":"https://api.github.com/users/robszumski/following{/other_user}","gists_url":"https://api.github.com/users/robszumski/gists{/gist_id}","starred_url":"https://api.github.com/users/robszumski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robszumski/subscriptions","organizations_url":"https://api.github.com/users/robszumski/orgs","repos_url":"https://api.github.com/users/robszumski/repos","events_url":"https://api.github.com/users/robszumski/events{/privacy}","received_events_url":"https://api.github.com/users/robszumski/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/coreos/rocket/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/coreos/rocket/labels/help%20wanted","name":"help wanted","color":"159818"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-02-06T02:15:33Z","updated_at":"2015-02-08T15:21:04Z","closed_at":null,"body":"If you fetch an ACI without trusting the signature before hand, the error you encounter doesn't give any hint how to fix the problem and is also a bit \"raw\":\r\n\r\n```\r\n$ rkt fetch coreos.com/etcd:v2.0.0\r\nrkt: searching for app image coreos.com/etcd:v2.0.0\r\nrkt: fetching image from https://github.com/coreos/etcd/releases/download/v2.0.0/etcd-v2.0.0-linux-amd64.aci\r\nDownloading aci: [=======================================      ] 3.28 MB/3.7 MB\r\nDownloading signature from https://github.com/coreos/etcd/releases/download/v2.0.0/etcd-v2.0.0-linux-amd64.sig\r\nopenpgp: signature made by unknown entity\r\n```\r\n\r\nInstead of outputting the raw error, I propose we rewrite as:\r\n\r\n```\r\nACI has been signed by an unknown and untrusted entity. To trust the creator, locate the signatory's public key and trust it.\r\nUsing meta discovery:\r\n  rkt trust --prefix coreos.com/etcd\r\nOr, provide a direct location:\r\n  rkt trust --prefix coreos.com/etcd <key>\r\n```\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/coreos/rocket/issues/comments/73415158","html_url":"https://github.com/coreos/rocket/issues/481#issuecomment-73415158","issue_url":"https://api.github.com/repos/coreos/rocket/issues/481","id":73415158,"user":{"login":"polvi","id":46035,"avatar_url":"https://avatars.githubusercontent.com/u/46035?v=3","gravatar_id":"","url":"https://api.github.com/users/polvi","html_url":"https://github.com/polvi","followers_url":"https://api.github.com/users/polvi/followers","following_url":"https://api.github.com/users/polvi/following{/other_user}","gists_url":"https://api.github.com/users/polvi/gists{/gist_id}","starred_url":"https://api.github.com/users/polvi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/polvi/subscriptions","organizations_url":"https://api.github.com/users/polvi/orgs","repos_url":"https://api.github.com/users/polvi/repos","events_url":"https://api.github.com/users/polvi/events{/privacy}","received_events_url":"https://api.github.com/users/polvi/received_events","type":"User","site_admin":false},"created_at":"2015-02-08T15:21:04Z","updated_at":"2015-02-08T15:21:04Z","body":"Nailed it. We need to double check the cryptosystem behind this is valid... i.e. that we can make these assumptions safely. But looks good. "}}