package encryption

import "github.com/containerd/nydus-snapshotter/pkg/encryption"

Index ¶

• func DeryptNydusBootstrap(ctx context.Context, cs content.Store, desc ocispec.Descriptor, decryptKeys []string, unwrapOnly bool) (ocispec.Descriptor, error)
• func EncryptNydusBootstrap(ctx context.Context, cs content.Store, desc ocispec.Descriptor, encryptRecipients []string) (ocispec.Descriptor, error)

Functions ¶

func DeryptNydusBootstrap ¶

func DeryptNydusBootstrap(ctx context.Context, cs content.Store, desc ocispec.Descriptor, decryptKeys []string, unwrapOnly bool) (ocispec.Descriptor, error)

Decrypt the Nydus boostrap layer. If unwrapOnly is set we will only try to decrypt the layer encryption key and return, the layer itself won't be decrypted actually.

func EncryptNydusBootstrap ¶

func EncryptNydusBootstrap(ctx context.Context, cs content.Store, desc ocispec.Descriptor, encryptRecipients []string) (ocispec.Descriptor, error)

Encrypt Nydus bootstrap layer

Source Files ¶

encryption.go