search

nlewo / nix2container

An archive-less dockerTools.buildImage implementation
Apache License 2.0
501 stars 45 forks source link

Generate and verify trace to debug the "digest did not match" issue #135

Open nlewo opened 4 months ago

nlewo commented 4 months ago

This option can to be set to debug digest mismatch issue. It generates a trace a build time and the script image.verifyTrace. These traces contains all file attribute written to the tar stream and the chechsum of all file writter to the tar stream.

This could allow to identify differences because of the sandbox used at build time while the Nix build sandbox is not used to run time, when the image is pushed to a destination.

Also see the added scetion in the README for more information.