support c/storage to c/storage copy without transformations #2599
Labels
kind/feature
A request for, or a PR adding, new functionality
Comments
cgwalters
added
the
kind/feature
ckyrouac
added a commit
to ckyrouac/bootc
that referenced
this issue
Oct 15, 2024
We are unable to copy a signed image from c/storage -> c/storage while preserving the signature. See containers/image#2599 fixes containers#812 Signed-off-by: Chris Kyrouac <[email protected]>
ckyrouac
added a commit
to ckyrouac/bootc
that referenced
this issue
Oct 15, 2024
We are unable to copy a signed image from c/storage -> c/storage while preserving the signature. See containers/image#2599 fixes containers#812 Signed-off-by: Chris Kyrouac <[email protected]>
mmartinv
added a commit
to mmartinv/osbuild-images
that referenced
this issue
Oct 22, 2024
Make `skopeo copy` to remove the signatures of signed containers by default to avoid build failures until [1] is implemented. Depends: osbuild/osbuild#1906 Resolves: osbuild/bootc-image-builder#681 [1] containers/image#2599 Signed-off-by: Miguel Martín <[email protected]>
mmartinv
added a commit
to mmartinv/osbuild-images
that referenced
this issue
Oct 22, 2024
Make `skopeo copy` to remove the signatures of signed containers by default to avoid build failures until [1] is implemented. Depends: osbuild/osbuild#1906 Resolves: osbuild/bootc-image-builder#681 [1] containers/image#2599 Signed-off-by: Miguel Martín <[email protected]>
mmartinv
added a commit
to mmartinv/osbuild-images
that referenced
this issue
Oct 22, 2024
Make `skopeo copy` to remove the signatures of signed containers by default to avoid build failures until [1] is implemented. Depends: osbuild/osbuild#1906 Resolves: osbuild/bootc-image-builder#681 [1] containers/image#2599 Signed-off-by: Miguel Martín <[email protected]>
mmartinv
added a commit
to mmartinv/osbuild-images
that referenced
this issue
Oct 25, 2024
Make `skopeo copy` to remove the signatures of signed containers by default to avoid build failures until [1] is implemented. Depends: osbuild/osbuild#1906 Resolves: osbuild/bootc-image-builder#681 [1] containers/image#2599 Co-authored-by: Michael Vogt <[email protected]>
mmartinv
added a commit
to mmartinv/osbuild-images
that referenced
this issue
Oct 29, 2024
Make `skopeo copy` to remove the signatures of signed containers by default to avoid build failures until [1] is implemented. Depends: osbuild/osbuild#1906 Resolves: osbuild/bootc-image-builder#681 [1] containers/image#2599 Co-authored-by: Michael Vogt <[email protected]>
github-merge-queue bot
pushed a commit
to osbuild/images
that referenced
this issue
Oct 30, 2024
Make `skopeo copy` to remove the signatures of signed containers by default to avoid build failures until [1] is implemented. Depends: osbuild/osbuild#1906 Resolves: osbuild/bootc-image-builder#681 [1] containers/image#2599 Co-authored-by: Michael Vogt <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
See #2590
To summarize, the goal here is something like
skopeo copy containers-storage:[overlay@srcpath+srcrunroot:trusted=true]registry.redhat.io/ubi9/ubi:latest copy containers-storage:[overlay@destpath+destrunroot]registry.redhat.io/ubi9/ubi:latest(copying between two c/storage instances) in a "bit for bit" style manner; we wouldn't attempt to re-serialize the source image into a new manifest (with uncompressed data).Implicitly in this we're currently trusting the source - we're not re-verifying the signature vs the source manifest etc. It's "just a copy".
The text was updated successfully, but these errors were encountered: