补充 OSS 验证策略配置示例

docker/examples/validate-policy.toml

@@ -0,0 +1,37 @@
+# Container-path configuration showcase for validation policy and rsync.
+# Copy the file outside this directory and set CONFIG_FILE to its absolute path.
+# The fixed validation time makes the example reproducible; update it or remove
+# the line when using it against a current public repository.
+config-version = 1
+mode = "validate"
+out = "/output/policy"
+rrdp-state-dir = "/state/policy"
+rrdp-sync-mode = "auto"
+ccr-out = "/output/policy/result.ccr"
+publish-dir = "/output/publish"
+
+resource-validation-mode = "validation-update-03" # or "rfc6487"
+validation-time = "2026-09-22T00:00:00Z"
+sync-preference = "rrdp-then-rsync" # or "rsync-only"
+rsync-timeout-secs = 30
+rsync-command = "/usr/bin/rsync"
+rsync-mirror-root = "/state/rsync-mirror"
+rsync-scope = "module-root" # "host" or "publication-point"
+
+run-timeout-secs = 1800
+require-complete = true
+ta-refresh-policy = "allow-valid-cache"
+log-level = "info"
+log-format = "text"
+
+[[anchors]]
+id = "anchor"
+tal = "/input/anchor.tal"
+# ta = "/input/anchor.cer" # uncomment to pin a fixed TA certificate
+
+# Keep the compatibility profile for a general public-repository example.
+# Set the first two fields to true to enable strict name/CMS DER checks.
+[strict]
+name = false
+cms-der = false
+signed-attrs = false