Closed buckaroogeek closed 4 years ago
@QiWang19 PTAL
Are you expecting podman manifest returning the error resolving image names
like buildah because the images have same IDs? Is this is a podman issue?
If this is a buildah issue, I avoid the error by manifest inspect the image name instead of using the id. But buildah should support resolving the id.
@QiWang19 - I would expect both podman and buildah to return the same result. And my preference would be for the podman result (ie display the manifest). Repositories will likely have the same image ID on multiple images if tags are used. Tag 'latest' is identical since the most recent version of the container is 2.2.8. Parenthetically I am going to drop 'latest' but there may well be use cases for multiple images sharing the same image ID.
thanks!
@QiWang19 - based on a couple of experiments, I would offer that 'buildah manifest inspect' is more strict than 'podman manifest inspect'. For example (using the repo list in the original post)
[bgsmith@pico dns-over-https]$ podman manifest inspect doh-client
{
"schemaVersion": 2,
"mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
"manifests": [
{
"mediaType": "application/vnd.oci.image.manifest.v1+json",
"size": 497,
"digest": "sha256:0c8c4d30a2050a88a39f281797405e389d5ce453ef4f4b9d7534e34fbd3045f5",
"platform": {
"architecture": "arm64",
"os": "linux",
"variant": "v8"
}
},
{
"mediaType": "application/vnd.oci.image.manifest.v1+json",
"size": 497,
"digest": "sha256:22345e4a24cd86b03129feb26996d5663589f8b34eac251276f390a6908f9717",
"platform": {
"architecture": "amd64",
"os": "linux"
}
}
]
}
[bgsmith@pico dns-over-https]$ buildah manifest inspect doh-client
tried reading image "docker://doh-client:latest": Error reading manifest latest in docker.io/library/doh-client: errors:
denied: requested access to the resource is denied
unauthorized: authentication required
: tried reading image "docker://registry.centos.org/doh-client:latest": Error reading manifest latest in registry.centos.org/doh-client: manifest unknown: manifest unknown
: tried reading image "docker://registry.access.redhat.com/doh-client:latest": Error reading manifest latest in registry.access.redhat.com/doh-client: name unknown: Repo not found
: tried reading image "docker://registry.fedoraproject.org/doh-client:latest": Error reading manifest latest in registry.fedoraproject.org/doh-client: manifest unknown: manifest unknown
: reading image "docker://localhost/doh-client:latest": error pinging docker registry localhost: Get "https://localhost/v2/": dial tcp [::1]:443: connect: connection refused
ERRO exit status 125
but I get the manifest if I do
buildah manifest inspect doh-client:2.2.8
Would it be better for both buildah and podman to work the same way when doing a manifest inspect? I.E consist behavior from both buildah and podman. I lean to the 'be liberal in what you accept' but consistency would have value.
thanks!
Description
I am experimenting with using buildah to create multiarch images (using code shared by @nalind on youtube). With a multiarch manifest in a local repository, I would expect
to be identical to
Steps to reproduce the issue:
Describe the results you received:
Describe the results you expected: Identical result for manifest inspect on an image.
Output of
rpm -q buildah
orapt list buildah
:Output of
buildah version
:Output of
podman version
if reporting apodman build
issue:*Output of `cat /etc/release`:**
Output of
uname -a
:Output of
cat /etc/containers/storage.conf
: