Good beautiful morning, Happy New Year listeners! π₯³We are kicking off #DeveloperStories 2023 with an awesome episode on container security and related topics! My guest is @sudo_bmitch, who is not only a #Docker captain, but an exceptional and kind person. podcasts.apple.com/us/podcasβ¦
A Halloween treat for all the container kids. This is removing Docker Hub's filter on the config media type, so you can push an image manifest that packages OCI v1 artifacts.
docker.com/blog/announcing-dβ¦
Gather round my goblins, ghoulies, and gargoyles! It's the end of the month - the Thursday before Halloween! πββ¬πππ» and it's time for some fun! Have you noticed that #RSEStories was a bit quiet for a month? We are excited to announce some news brought by winds of change... π¬οΈ
There's a big change happening for Windows images, redistribution of the Microsoft layers is now permitted in WS2019 and WS2022. 1/
techcommunity.microsoft.com/β¦
For end users, regctl has the ability to copy those layers and remove the nondistributable flag using:
regctl image copy ${upstream} ${local} --include-external
regctl image mod ${local} --external-urls-rm --replace
4/
github.com/regclient/regclieβ¦
Going forward, OCI is looking at deprecating the nondistributable options. That doesn't stop you from using old images, and no OCI police will show up at your door for using it, but I'd avoid building anything new with this. 4/
github.com/opencontainers/imβ¦
There are a few issues here. First, to anything thinking "if I run docker build twice, the second build is fast and identical to the first", that's not reproducible, that's just cached. 1/
There are a few issues here. First, to anything thinking "if I run docker build twice, the second build is fast and identical to the first", that's not reproducible, that's just cached. 1/
Later work needs to wrap a regclient and httplock into a single command to create a reproducible image, and to rebuild and easily compare different image builds. This is only at the rough shell script PoC stage now. 11/
github.com/sudo-bmitch/rebuiβ¦
This is all a work in progress which is why I don't talk about it much. But I'm happy to work with others that want to solve it. Feel free to reach out. 12/