unknown flag: --pretty and unknown command - trust as per the new docker version 29.1.3

[yogesh119905]

Description

We have installed the latest version of Docker (29.1.3) in our environment. However, some commands are not functioning as expected in this version. The error messages provided are quite clear, but these issues are not mentioned in the official documentation or release notes.

**root@virtnotary:~# docker trust inspect --pretty hostnameXXXXX:5000/docker-release-local/alpine
unknown flag: --pretty

Usage: docker [OPTIONS] COMMAND [ARG...]

Run 'docker --help' for more information**

**root@virtnotary:~# docker trust inspect hostnameXXXXX:5000/docker-release-local/alpine
docker: unknown command: docker trust

Run 'docker --help' for more information**

Below is the docker version details

root@virtnotary:~# docker version
Client: Docker Engine - Community
Version: 29.1.3
API version: 1.52
Go version: go1.25.5
Git commit: f52814d
Built: Fri Dec 12 14:49:32 2025
OS/Arch: linux/amd64
Context: default

Server: Docker Engine - Community
Engine:
Version: 29.1.3
API version: 1.52 (minimum version 1.44)
Go version: go1.25.5
Git commit: fbf3ed2
Built: Fri Dec 12 14:49:32 2025
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: v2.2.1
GitCommit: dea7da592f5d1d2b7755e3a161be07f43fad8f75
runc:
Version: 1.3.4
GitCommit: v1.3.4-0-gd6d73eb8
docker-init:
Version: 0.19.0
GitCommit: de40ad0
root@virtnotary:~#

While I am trying without trust and pretty flag does final output is correct or not?

Reproduce

1. docker pull (sudo -i docker pull XXXXXXXXXXXXXX/library/alpine)
2. set the environment variable
3. set the tag (sudo -i docker tag XXXXXXXXXXXXXX/library/alpine hostnameXXXXX:5000/docker-release-local/alpine).
4. docker push (sudo -i docker push hostnameXXXXX:5000/docker-release-local/alpine)
5. sudo -i docker rmi hostnameXXXXX:5000/docker-release-local/alpine
6. sudo -i docker pull hostnameXXXXX:5000/docker-release-local/alpine
7. sudo -i docker images
8. docker trust inspect --pretty hostnameXXXXX:5000/docker-release-local/alpine

Expected behavior

As per the latest version, the functionality should be operational. If there have been any updates or changes to the Docker Trust commands, please let me know. I attempted to use docker trust inspect --pretty on the image hostnameXXXXX:5000/docker-release-local/alpine, but I couldn’t find support for the docker trust command or the --pretty flag. Could you please share your thoughts on this?

Expected Behavior:
The command docker trust inspect --pretty should return detailed trust information for the specified image, including its signing status and metadata, in a readable format.

docker version

# docker version
Client: Docker Engine - Community
 Version:           29.1.3
 API version:       1.52
 Go version:        go1.25.5
 Git commit:        f52814d
 Built:             Fri Dec 12 14:49:32 2025
 OS/Arch:           linux/amd64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          29.1.3
  API version:      1.52 (minimum version 1.44)
  Go version:       go1.25.5
  Git commit:       fbf3ed2
  Built:            Fri Dec 12 14:49:32 2025
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          v2.2.1
  GitCommit:        dea7da592f5d1d2b7755e3a161be07f43fad8f75
 runc:
  Version:          1.3.4
  GitCommit:        v1.3.4-0-gd6d73eb8
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker info

Client: Docker Engine - Community
 Version:    29.1.3
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.30.1
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v5.0.1
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 2
  Running: 2
  Paused: 0
  Stopped: 0
 Images: 4
 Server Version: 29.1.3
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: dea7da592f5d1d2b7755e3a161be07f43fad8f75
 runc version: v1.3.4-0-gd6d73eb8
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
  no-new-privileges
 Kernel Version: 6.8.0-86-generic
 Operating System: Ubuntu 24.04.3 LTS
 OSType: linux
 Architecture: x86_64
 CPUs: 1
 Total Memory: 1.922GiB
 Name: XXX
 ID: 9f163212-bfe3-452c-a670-8fb30f496ba8
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http://XXX:XXXX
 HTTPS Proxy: http://XXX:XXXX
 No Proxy: localhost,127.0.0.1,XXX,XXX,XXX,hostname,hostname:5000
 Experimental: false
 Insecure Registries:
  artifactory.muzo.com
  docker-release.repo.globalpay.cz
  docker-remote.repo.globalpay.cz
  virtplatform
  virtplatform.srv.gpe:5000
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: true
 Default Address Pools:
   Base: 10.240.0.0/16, Size: 24
 Firewall Backend: iptables

Additional Info

Could you please confirm whether the docker trust command and the --pretty flag have been completely removed in the latest version?
Could you also confirm if there is a new utility available to replace docker trust?

[yogesh119905]

@thaJeztah @vvoland Can anyone help me in this issue?

[vvoland]

Docker Content Trust has been deprecated and removed in v29.0.0.

See:

• https://www.docker.com/blog/retiring-docker-content-trust/
• implement docker trust as plugin #6121
• https://github.com/moby/moby/releases/tag/docker-v29.0.0

If for some reason you still need the trust subcommand and would like to build it yourself, the source code of the trust has been extracted to a CLI plugin which is available here: https://github.com/docker/cli/tree/master/cmd/docker-trust.

[vvoland]

Closing the issue, but feel free to continue the conversation.