Skip to content

docs(login): note --tls-verify needs = for false - #7022

Open
locker95 wants to merge 2 commits into
podman-container-tools:mainfrom
locker95:docs/tls-verify-bool-flag-form
Open

docs(login): note --tls-verify needs = for false#7022
locker95 wants to merge 2 commits into
podman-container-tools:mainfrom
locker95:docs/tls-verify-bool-flag-form

Conversation

@locker95

@locker95 locker95 commented Aug 9, 2026

Copy link
Copy Markdown

--tls-verify is a bool flag, so a bare --tls-verify means true and --tls-verify false is not a value assignment (the next token is treated as the registry). The examples already use --tls-verify=false; spelled that out next to the option so it is less surprising.

Fixes #6375

Boolean flags treat a bare --tls-verify as true; --tls-verify false is
parsed as a registry name. Document the = form used in the examples.

Fixes: podman-container-tools#6375

Signed-off-by: Dean Chen <862469039@qq.com>
Comment thread docs/buildah-login.1.md
`--tls-verify=false`). A bare `--tls-verify` is treated as true; a space-separated
form such as `--tls-verify false` is not accepted (the word after the flag is
parsed as a registry name).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your thought is good, but I'd rather it be worked into the prior paragraph, as this is kind of a boolean+ option and true can operate differently depending on how it is defined. Perhaps:

Require HTTPS and certificate verification when talking to container registries (default: true). As this is a boolean value, use the = form when passing a value, for example, --tls-verify=false.

If explicitly set to true,
then TLS verification will be used. If set to false, then TLS verification will not be used. If not specified,
TLS verification will be used unless the target registry is listed as an insecure registry in registries.conf.
TLS verification cannot be used when talking to an insecure registry. Note: a space-separated form such as --tls-verify false is not accepted (the word after the flag is
parsed as a registry name).

Signed-off-by: Dean Chen <862469039@qq.com>
@locker95

Copy link
Copy Markdown
Author

fair — folded the = form note into the main paragraph instead of a separate block.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CLI Inconsistency With --tls-verify

2 participants