Story #1145
closed
As a user, I am assured that Pulp is downloading the correct manifests
100%
Description
The docker manifests have a digest, which is supposed to be a checksum of the manifest. However, the manifest checksum is not calculated on the downloaded manifest but on some permutation of the manifest. The necessary permutation is not known to the Pulp team at this time, so part of this effort will be determining how to calculate the checksum of the digest. There is a GitHub issue[0] with some information that may be useful. Hint: It may be related to removing signatures, but I am not sure.
Deliverables:
- Determine how to calculate the digest of the manifest, since the manifest as presented has a different checksum than the given digest from the registry.
- Rework the Importer to validate the digest of the downloaded manifests to ensure that the expected data was received
- Consider whether this should be a setting or not (I lean towards not). If you determine that it should, make sure pulp-admin supports it
- Tests
- Documentation
Related issues
Updated by rbarlow over 8 years ago
- Blocked by Story #968: As a user, I can sync from a v2 registry added
Updated by rbarlow over 8 years ago
- Blocks Task #1048: Tracker for Docker v2 API and Manifest work added
Added by rbarlow over 8 years ago
Added by rbarlow over 8 years ago
Revision a11e0b15 | View on GitHub
Add the ability for users to be able to sync from other Pulp servers.
This commit adds code that can calculate the digest of a raw JSON manifest. This allows users to sync from feed URLs that do not provide the digest header, and it also allows Pulp to verify the digest of manifests downloaded from feed URLs that do provide the header.
https://pulp.plan.io/issues/1145 https://pulp.plan.io/issues/1316
Added by rbarlow over 8 years ago
Revision a11e0b15 | View on GitHub
Add the ability for users to be able to sync from other Pulp servers.
This commit adds code that can calculate the digest of a raw JSON manifest. This allows users to sync from feed URLs that do not provide the digest header, and it also allows Pulp to verify the digest of manifests downloaded from feed URLs that do provide the header.
https://pulp.plan.io/issues/1145 https://pulp.plan.io/issues/1316
Added by rbarlow over 8 years ago
Revision a11e0b15 | View on GitHub
Add the ability for users to be able to sync from other Pulp servers.
This commit adds code that can calculate the digest of a raw JSON manifest. This allows users to sync from feed URLs that do not provide the digest header, and it also allows Pulp to verify the digest of manifests downloaded from feed URLs that do provide the header.
https://pulp.plan.io/issues/1145 https://pulp.plan.io/issues/1316
Updated by rbarlow over 8 years ago
- Status changed from NEW to MODIFIED
- % Done changed from 0 to 100
Applied in changeset a11e0b15a800e574773ea2082be3bb7360601a65.
Updated by dkliban@redhat.com about 8 years ago
- Status changed from 5 to CLOSED - CURRENTRELEASE
.
Add the ability for users to be able to sync from other Pulp servers.
This commit adds code that can calculate the digest of a raw JSON manifest. This allows users to sync from feed URLs that do not provide the digest header, and it also allows Pulp to verify the digest of manifests downloaded from feed URLs that do provide the header.
https://pulp.plan.io/issues/1145 https://pulp.plan.io/issues/1316
closes #1145 closes #1316