-
Notifications
You must be signed in to change notification settings - Fork 18.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Compute TarSum on storage of image layer content #8964
Conversation
30e193f
to
2987aa3
Compare
@@ -74,19 +76,44 @@ func LoadImage(root string) (*Image, error) { | |||
return img, nil | |||
} | |||
|
|||
// StoreImage stores file system layer data for the given image to the | |||
// image's registered storage driver. Image metadata is stored in a file | |||
// at the specified root directory. If `computeChecksum` is true, this |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't see a computeChecksum
flag, is the comment referring to a removed piece of code?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah, yes. I considered adding a flag at first, but decided not to. I'll remove it now.
Besides the comment on the comment, LGTM. |
Now, newly created/imported layers will have the checksum of the layer diff computed and stored in the image json file. For now, it is not an error if the computed checksum does not match an existing checksum, only a warning message is logged. The eventual goal is to use the checksums in the image JSON to verify the integrity of the layer contents when doing `docker load` or `docker pull`, and error out if it does not match. Docker-DCO-1.1-Signed-off-by: Josh Hawn <josh.hawn@docker.com> (github: jlhawn)
2987aa3
to
059e589
Compare
@unclejack gets a ping, @jfrazelle gets a ping, @tiborvass gets a ping, and @crosbymichael gets a ping! |
LGTM |
1 similar comment
LGTM |
Happy here. |
LGTM |
Compute TarSum on storage of image layer content
Now, newly created/imported layers will have the checksum of
the layer diff computed and stored in the image json file.
For now, it is not an error if the computed checksum does not
match an existing checksum, only a warning message is logged. The
eventual goal is to use the checksums in the image JSON to verify
the integrity of the layer contents when doing
docker load
ordocker pull
, and error out if it does not match.Docker-DCO-1.1-Signed-off-by: Josh Hawn josh.hawn@docker.com (github:jlhawn)