search

notaryproject / tuf

The Update Framework for OCI Registries
11 stars 11 forks source link

Add document and diagram for artifact movement #31

Open mnm678 opened 2 years ago

mnm678 commented 2 years ago

cc @SteveLasker @sudo-bmitch

Let me know if there are any specific scenarios you'd like me to describe in more detail.

mnm678 commented 2 years ago

LGTM. I'm also remembering that we want a way to avoid "copying the world" when one repository or even a couple tags are mirrored. We may be able to push some of that off to registry settings that could allow "sparse indexes" where not all child manifests exist. But if metadata can be structured to not require that, even better.

This is an interesting one. This doc covers moving a single artifact with any signatures (which could easily be used to copy a couple of artifacts), or mirroring everything, but not mirroring most things. If this is a common scenario, we could create a delegation structure that would let you copy a sub-tree of the delegations or somethings similar.