Brandon Mitchell

> @sudo-bmitch I known that this was closed, noticed that you mentioned `zstd compressed` tar layers, what about just `zstd compressed` raw file, no tar, one file per layer, could...

> True, still consider the case of streaming data on per-layer basis, one-file-per-layer compressed with ztsd or gzip is simpler to stream compared to a file wrapped into tar. Can...

I tend to agree that this would be a vulnerability for clients, and treated it as a security issue in my own project. https://github.com/regclient/regclient/security/advisories/GHSA-qv35-3gw6-8q4j

I've been thinking about this one for a bit, and one thought I keep coming back to is whether storing the config in a registry as an artifact, or via...

This is currently part of the design of the OCI referrers API. It doesn't let you query referrers to an image that exist in other repositories. There are several use...

The requirement to scope the API to the repository is similar to how references between the Index, Image manifest, and Config/Layer blobs are all scoped to the same repository. Servers...

This looks like https://github.com/golang/go/issues/18639 Handling that is going to require a check of the http2 errors that may be returned from net/http, and when these are seen, configure the backoff/retry...

Looking over this again, I see that this is just a debug log and the code looks like it should retry in that scenario. Was there an error that needed...

Today this is supported by building the directory structure as you need it, e.g. creating `/tmp/output/data/models/custom_model` and adding the layer with `/tmp/output`. You could also build your own tar file...

`regctl image mod` is modifying the image, and the `index.json` file is a listing of images in the OCI Layout, not the image itself. ```shell $ regctl manifest get ocidir://python:2.7-slim-buster...