Brandon Mitchell
Brandon Mitchell
Chatting about this in today's meeting we decided to close this until there's an identified need that doesn't have a workaround with the current implementation.
Cleaning this up, see the discussion at https://github.com/opencontainers/image-spec/pull/1074#issuecomment-2115891422.
We fixed this be removing the yaml dependency entirely.
> SLSA provenance manifest blobs (enabled by default in recent buildx) are not reproducible by design, so the image index digest will not be reproducible. The index could be reproducible...
> > The index could be reproducible if the artifacts were associated using the upcoming OCI subject/referrers API rather than injecting it directly in the index. > > Yes, but...
This is definitely on my todo list. I'll move up the priority on it.
#736 solves the request for the first option. I have concerns about including the ability to do the second option, since the compression type could mismatch the media type, and...
> emmm can't I modify an image locally, without uploading to any registry? You can! `ocidir://path:tag` is used to reference an image in an OCI Layout with regclient. E.g. ```shell...
> My most compelling argument would that this feature will complement #721 `solution 2` where under Bazel the digest for each layer is calculated out-of-band using this feature. Since the...
> The offered workaround does not solve the problem of deduplicating the layers. Being able to copy images to same ocidir (or export multiple image in same command) would allow...