Playbook: Docker Content Trust and notary.docker.io shut down December 8, 2026

3 Reply templates

Answer the question first. Link only if it helps. Always keep the disclosure line. Never post the same text twice.

Helpful first

Sorry you have to deal with this. You can stay on Docker. Here is what to change before December 8, 2026:

1. Search for DCT. Look for DOCKER_CONTENT_TRUST and docker trust in CI files, shell profiles, Compose files and Kubernetes files.
2. Turn it off where you only pull. Unset DOCKER_CONTENT_TRUST or set it to 0.
3. Pin images by digest. Use the image digest instead of only a tag in Dockerfiles, so you always get the same image.

If they would rather leave, describe a verified way <your product> can help: <your link>
[Disclosure: I build <your product>.]

Short answer

You have until December 8, 2026. You can stay on Docker. First: search for DCT. Then turn it off where you only pull.
Happy to help if you get stuck.
[Disclosure: I build <your product>.]

4 Switch-page builder

Create a draft “Switch from Docker” page. Add your product, review every claim, then copy HTML or Markdown. Your product claims need your own evidence.

Add your product name to replace “Your product”.

Preview

Switch from Docker to Your product

Docker Content Trust signing and checks: a change is due by December 8. You can stay on Docker. If you would rather leave, here is how to move to Your product.

What changes at Docker

Docker ends Docker Content Trust (DCT) on December 8, 2026. Its Notary v1 server at notary.docker.io shuts down that day. This only matters if you set DOCKER_CONTENT_TRUST=1 or use docker trust commands. Normal docker pull and push keep working.

Full shutdown: December 8, 2026 (Docker)
Who is affected: You set DOCKER_CONTENT_TRUST=1, use docker trust sign, inspect or revoke, or check DCT signatures in deploy policies (Docker)
Not affected: Normal docker pull and docker push, if you never turned DCT on (Docker)
Brownouts (already done): July 14 and July 15, 2026 for writes; August 10 and August 12, 2026 for reads (Docker)
Docker Hub pulls that use DCT: Fewer than 0.05% (Docker)
Fastest fix: unset DOCKER_CONTENT_TRUST, or set DOCKER_CONTENT_TRUST=0 (Docker)
Signing tools Docker points to: Sigstore/Cosign and Notation (Docker)
If you sign images on Docker Hub: Docker cannot make new signatures for you; sign with Cosign or Notation (Docker)
First announced: July 2025 (Docker)
Guide posted: June 16, 2026 (Docker)
Setups with DCT turned on: Lose the Notary v1 service on December 8, 2026 (Docker)

You can stay on Docker if you make the change. This page is for people who would rather leave.

What Your product gives you

Write two or three short lines here. Say what Your product does, who it is for, and what it costs. Use only facts you can show.

How to move from Docker to Your product

Save what you need from Docker. Keep a copy before you cancel anything.
Import into Your product. Say which files you accept and how long an import takes.

Tell readers the key date: December 8, 2026.

Questions people ask

If Your product has a direct answer to one of these, add it here. Keep it short and true.

How to help new users settle in

Send one short email. Say what changed, where to find you now, and what they need to do. Put the most important line first.

If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.

Sources

Retired features — Docker (primary), checked 2026-10-17
Docker Content Trust: Retirement and Migration Guidance — Docker (primary), checked 2026-10-17

Docker Content Trust and notary.docker.io shut down December 8, 2026

1 Related discussions

2 What people ask