Project

Profile

Help

Issue #3126

As a user, I can verify blobs checksum during v2 image import

Added by mihai.ibanescu@gmail.com about 4 years ago. Updated over 2 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version - Docker:
Platform Release:
2.15.1
Target Release - Docker:
OS:
Triaged:
No
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

When we upload a v2 docker image into Pulp, we do not perform any checks on blobs, so we cannot be sure that we downloaded what we wanted to. We need to introduce a checksum verification on downloaded blobs.
Obviously, eventually docker client will stumble across corrupted blobs during docker pull, because it does a checksum verification of blobs, but at this point we cannot call ourself trustful, we cannot afford ourselves to leave things like this.


Related issues

Has duplicate Docker Support - Story #1329: As a user, I am assured that pulp_docker is downloading the correct Blob layersCLOSED - DUPLICATE

<a title="Actions" class="icon-only icon-actions js-contextmenu" href="#">Actions</a>
Copied from Docker Support - Story #2624: As a user, I can verify blobs checksum during syncCLOSED - WONTFIX

<a title="Actions" class="icon-only icon-actions js-contextmenu" href="#">Actions</a>

Associated revisions

Revision 32f89230 View on GitHub
Added by Mihai Ibanescu about 4 years ago

Verify blob checksum

closes #3126

Revision 32f89230 View on GitHub
Added by Mihai Ibanescu about 4 years ago

Verify blob checksum

closes #3126

Revision 32f89230 View on GitHub
Added by Mihai Ibanescu about 4 years ago

Verify blob checksum

closes #3126

Revision 32f89230 View on GitHub
Added by Mihai Ibanescu about 4 years ago

Verify blob checksum

closes #3126

Revision 97d54211 View on GitHub
Added by Mihai Ibanescu almost 4 years ago

Verify blob checksum

closes #3126

(cherry picked from commit 32f89230ee8f8cc86eb3015ba0244c0269a994f0)

Revision 97d54211 View on GitHub
Added by Mihai Ibanescu almost 4 years ago

Verify blob checksum

closes #3126

(cherry picked from commit 32f89230ee8f8cc86eb3015ba0244c0269a994f0)

History

#1 Updated by mihai.ibanescu@gmail.com about 4 years ago

  • Copied from Story #2624: As a user, I can verify blobs checksum during sync added

#3 Updated by mihai.ibanescu@gmail.com about 4 years ago

  • Status changed from NEW to POST

#4 Updated by mihai.ibanescu@gmail.com almost 4 years ago

  • Has duplicate Story #1329: As a user, I am assured that pulp_docker is downloading the correct Blob layers added

#5 Updated by Anonymous almost 4 years ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100

#6 Updated by dkliban@redhat.com almost 4 years ago

  • Tracker changed from Story to Issue
  • Severity set to 2. Medium
  • Triaged set to No

#7 Updated by pcreech almost 4 years ago

  • Platform Release set to 2.15.1

#8 Updated by Anonymous almost 4 years ago

#9 Updated by pcreech almost 4 years ago

  • Status changed from MODIFIED to 5

#10 Updated by pcreech almost 4 years ago

  • Status changed from 5 to CLOSED - CURRENTRELEASE

#11 Updated by bmbouter over 2 years ago

  • Tags Pulp 2 added

Please register to edit this issue

Also available in: Atom PDF