Aleksa Sarai

Well, I think for generation we should print a warning for anything other than sha256, but reading-wise I think we're fine. The main compatibility concern will probably come from registries.

I see this in umoci as well when running ClusterFuzzLite. [The log from the coverage job just looks like:](https://github.com/opencontainers/umoci/actions/runs/15263911942/job/42927979980) ``` 2025-05-27 01:23:08,004 - root - INFO - Deleting builder docker...

The validation code (`oci-image-tool validate`) is not hard deprecated, only the image manipulation tools (the other ones) are completely deprecated and should not be used ([umoci](https://github.com/opencontainers/umoci) is the OCI reference...

Yeah this is something I've wanted to figure out a nice way of supporting for a while (as well as providing more generic modification capabilities for descriptors), but I couldn't...

Some of the UX issues are described in #366 (and #511) and #298. The core issues are: 1. For read operations it's not too bad -- `Platform` can technically be...

Resurrecting this -- we discussed this back in 2017 when we switched to `org.opencontainers.image.ref.name` (from the old `refs` directory model) and the suggested "right" way of doing this was to...

This is actually a more generic issue -- if you have a tar archive with ``` a/b = not a directory a/b/c/d = some file ``` You will get the...

I saw that but wasn't sure if https://github.com/uber-go/zap is better maintained or not (though according to zap themselves, zerolog is faster). It would be nice to pick something that is...

Maybe we should have an internal logging driver that gets mapped to a different logger. This would also make it nicer to use umoci as a library in other large...

One of the things we would need to to do is store what directories each layer is extracted into and so on, but I just figured out that 9ab5eff081e262c268f3e419a7c19b55ab987661 actually...