imagetools: add oci-layout support#3721
Merged
tonistiigi merged 5 commits intodocker:masterfrom Mar 14, 2026
Merged
Conversation
ad9681c to
b294aa0
Compare
crazy-max
reviewed
Mar 12, 2026
Verify imagetools copies signatures only for attestation manifests and does not copy image-manifest signatures or unsupported referrers. Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Add oci-layout:// source and target support to imagetools create and inspect while keeping merge, filter, and referrer logic shared. Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Handle OCI layout referrers via subject-annotated index entries and add integration coverage for copying signed attestations through oci-layout. Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
When pushing to an OCI layout where the top-level descriptor blob already existed, pushOCILayout returned early without updating index.json or writing pending referrers. Restructure the control flow so the blob-exists case skips only the write but still updates the index and flushes referrers. Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
FetchReferrers accepted FetchReferrersOpt but dropped them when resolving OCI layout referrers. Forward the options and apply ArtifactTypes filtering so callers can narrow results consistently for both registry and local layout sources. Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
b294aa0 to
863398c
Compare
crazy-max
approved these changes
Mar 13, 2026
Member
|
Needs docs follow-up for v0.33.0 (cc @dvdksn) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add support for oci-layout format in
imagetools createandinspect. Same format as named context in build:Can be used both as a source or target parameter. You can mix oci-layout and registry references as you like.