Brandon Mitchell

Results 551 comments of Brandon Mitchell

Thanks for writing this up @syed! To capture my own thoughts on the discussion, it may make more sense to move the concept of the chunk index into the manifest....

> 1. It can lead to large manifests which can exceed the max allowed limit for a manifest whereas the blob chunk index can be of any arbitrary size This...

> > combine that with a hashing algorithm that can run in parallel across multiple segments of the blob. > > What you are suggesting is a commutative hashing algorithm...

> I'm not sure I follow. Let's say there's a 100GB file and say each chunk is 5GB. You are saying that the registry has to hold and allocate 100GB...

> If downloading is also not parallel, this is likely also an issue on download as well, but it is less user facing so may not see it. It's the...

Thanks for the submission. Please add the DCO signoff: https://github.com/opencontainers/distribution-spec/pull/471/checks?check_run_id=17124647922 This acknowledges your agreement to the DCO: https://github.com/opencontainers/distribution-spec/blob/main/CONTRIBUTING.md#sign-your-work

Rather than recreating the `security.txt` in annotations, I'd prefer a single annotation (`org.opencontainers.image.security`) with a URL to the project's security.txt.

I think the website lists the current OCI Members for anyone wondering if your organization is a member: https://opencontainers.org/

"without the tag" is the "latest" tag. Please include an example of the exact commands run in your steps to reproduce.