Project

Profile

Help

Actions
Send by e-mail Copy link

Issue #3126

closed

As a user, I can verify blobs checksum during v2 image import

Added by mihai.ibanescu@gmail.com about 7 years ago. Updated over 5 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version - Docker:
Platform Release:
2.15.1
Target Release - Docker:
OS:
Triaged:
No
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

When we upload a v2 docker image into Pulp, we do not perform any checks on blobs, so we cannot be sure that we downloaded what we wanted to. We need to introduce a checksum verification on downloaded blobs.
Obviously, eventually docker client will stumble across corrupted blobs during docker pull, because it does a checksum verification of blobs, but at this point we cannot call ourself trustful, we cannot afford ourselves to leave things like this.

Related issues

Has duplicate Docker Support - Story #1329: As a user, I am assured that pulp_docker is downloading the correct Blob layersCLOSED - DUPLICATE

Actions
Copied from Docker Support - Story #2624: As a user, I can verify blobs checksum during syncCLOSED - WONTFIX

Actions
Actions
Copy link
 #1

Updated by mihai.ibanescu@gmail.com about 7 years ago

  • Copied from Story #2624: As a user, I can verify blobs checksum during sync added

Added by Mihai Ibanescu about 7 years ago

Revision 32f89230 | View on GitHub

Verify blob checksum

closes #3126

Added by Mihai Ibanescu about 7 years ago

Revision 32f89230 | View on GitHub

Verify blob checksum

closes #3126

Added by Mihai Ibanescu about 7 years ago

Revision 32f89230 | View on GitHub

Verify blob checksum

closes #3126

Added by Mihai Ibanescu about 7 years ago

Revision 32f89230 | View on GitHub

Verify blob checksum

closes #3126

Actions
Copy link
 #3

Updated by mihai.ibanescu@gmail.com about 7 years ago

  • Status changed from NEW to POST
Actions
Copy link
 #4

Updated by mihai.ibanescu@gmail.com about 7 years ago

  • Has duplicate Story #1329: As a user, I am assured that pulp_docker is downloading the correct Blob layers added
Actions
Copy link
 #5

Updated by Anonymous almost 7 years ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100
Actions
Copy link
 #6

Updated by dkliban@redhat.com almost 7 years ago

  • Tracker changed from Story to Issue
  • Severity set to 2. Medium
  • Triaged set to No
Actions
Copy link
 #7

Updated by pcreech almost 7 years ago

  • Platform Release set to 2.15.1

Added by Mihai Ibanescu almost 7 years ago

Revision 97d54211 | View on GitHub

Verify blob checksum

closes #3126

(cherry picked from commit 32f89230ee8f8cc86eb3015ba0244c0269a994f0)

Added by Mihai Ibanescu almost 7 years ago

Revision 97d54211 | View on GitHub

Verify blob checksum

closes #3126

(cherry picked from commit 32f89230ee8f8cc86eb3015ba0244c0269a994f0)

Actions
Copy link
 #8

Updated by Anonymous almost 7 years ago

Actions
Copy link
 #9

Updated by pcreech almost 7 years ago

  • Status changed from MODIFIED to 5
Actions
Copy link
 #10

Updated by pcreech almost 7 years ago

  • Status changed from 5 to CLOSED - CURRENTRELEASE
Actions
Copy link
 #11

Updated by bmbouter over 5 years ago

  • Tags Pulp 2 added
Actions
Send by e-mail Copy link

Also available in: Atom PDF