Project

Profile

Help

Test #4461

As a user i can configure download of the foreign layers

Added by bherring over 1 year ago. Updated 20 days ago.

Status:
NEW
Priority:
Low
Assignee:
-
Sprint/Milestone:
-
Platform Release:
Tags:
Sprint:
Quarter:

Description

Some images like windows base images, contain artifacts whose distribution is restricted by license.
When these images are pushed to a registry, restricted artifacts are skipped/not included by default.

These artifacts are called foreign layers and have "mediaType": "application/vnd.docker.image.rootfs.foreign.diff.tar.gzip"

Remote should have a Boolean "*allow_foreign_layers*" option which would control the download of the foreign layers.

Set to False (default):
Pulp will check the mediatype and simply will skip the foreign layers.
Case: do not sync content which is restricted by a license without explicit acknowledgment in the Remote config
From client side, it will follow the url specified in the details of the layer in the manifest.

Set to True:
Pulp will download the foreign layers by following the url.
Case: due to use case of registries with air gaped network, now it's possible to push to the registry foreign layers, by enabling -allow-nondistributable-artifacts daemon option. From client side, foreign layers are now pulled from the registry if possible, falling back to the URLs in the image manifest otherwise. As far as i know that's done in docker for Windows. Linux version is still ignoring foreign layers during pull.

Cash For unwanted Cars.png (1.49 MB) Cash For unwanted Cars.png Anonymous, 03/21/2020 11:52 AM
250

Related issues

Copied from Container Support - Story #4171: As a user i can configure download of the foreign layersCLOSED - CURRENTRELEASE

<a title="Actions" class="icon-only icon-actions js-contextmenu" href="#">Actions</a>

History

#1 Updated by bherring over 1 year ago

  • Copied from Story #4171: As a user i can configure download of the foreign layers added

#2 Updated by bherring over 1 year ago

Notes from Triage

some docker repos that contain forigen layers... failed before this.. now it works
Always skips foriegn layers ; has a docker repo

#3 Updated by bmbouter over 1 year ago

  • Tags deleted (Pulp 3)

#4 Updated by ipanova@redhat.com 11 months ago

  • Project changed from Docker Support to Container Support

Please register to edit this issue

Also available in: Atom PDF